4 ms·
DoH is bad use DoT instead.
by denkmoon 4y ago
DoH is bad use DoT instead.
- josephcsible 4y agoThis couldn't be further from the truth. DoT is easy to block, so anyone who wants to censor or surveil you will just do so. You should always use DoH instead, since it's way more resistant to blocking.
- denkmoon 4y agoCan't wait til google owns your DNS and you can't do shit about it
- josephcsible 4y agoHow does DoH make DNS any more centralized than DoT does?
- denkmoon 4y agoWhen Google embed their DNS and their certificate into every Google product you have to use, you can't effectively block it.
- josephcsible 4y agoIf your goal isn't to censor or surveil other people, then why do you need to block Google's DNS rather than just not using it yourself?
- denkmoon 4y agoChromecast will use Google DNS and there is nothing you can do about it on the device. Guarantee this will happen to Chrome eventually.
- tsimionescu 4y agoUnfortunately, people are now often fighting with their own devices for control over which 3rd party services they access. This sometimes means that you have reasons to MITM or block traffic your own devices generate if you want to control aspects of who you actually send data to, or what data you actually send.
- magicalhippo 4y agoNot just block. I run split-horizon DNS at home for a few of my services. Without being able to control the DNS for devices on my LAN, they can't use those services. Now you might argue that's a bit silly, but it is a use-case.