4 ms·
Targeting DNS providers is only worth it because of the growing power of resolvers like Quad9 and 1.1.1.1. Otherwise they would have to go back to getting order
by _23sd 4y ago
Targeting DNS providers is only worth it because of the growing power of resolvers like Quad9 and 1.1.1.1. Otherwise they would have to go back to getting orders against every ISP in a jurisdiction, which should be near-impossible in a free country but admittedly European countries have disappointed on this issue. Web browser vendors and Cloudflare decided for some reason that everyone needs to use DoH, and while I'm still waiting for news of an actual attack happening to someone that DoH would have foiled, Hollywood isn't waiting to use this increasing centralization for their attacks on web users.
- charcircuit 4y ago>I'm still waiting for news of an actual attack happening to someone that DoH would have foiled There exist ISPs who currently MitM attack any DNS requests to block them / replace them with ads if it doesn't exist. 3rd party DNS over UDP doesn't help, but over HTTPS does.
- _23sd 4y agoTrue, though in my opinion that's not nearly widespread or impactful enough that people needed to be opted in to DoH by default as in Firefox, or sold DoH as a "safer" option like Cloudflare does.