3 ms·
Firefox should natively support OpenNIC and other alternative DNS providers: https://en.wikipedia.org/wiki/Alternative_DNS_root https://en.wikipedia.org/wiki/A
by _8j50 3y ago
Firefox should natively support OpenNIC and other alternative DNS providers:
https://en.wikipedia.org/wiki/Alternative_DNS_root https://en.wikipedia.org/wiki/Alternative_DNS_root
This will help Mozilla gain marketshare by being the goto browser for anyone wanting to access non-mainstream sites.
But I admit, that also makes firefox hostile to corporate environments. If only firefox obeyed windows system/gpo/registry settings like chrome. I have never seen a non-tech company even permit firefox in their IT policy for these and other reasons anyways.
If they really are for privacy for individuals, this is the way!
It would also be ideal if alternative root systems supported DoH well. But that's only half the problem, discovering a list or resolvers is a big pain because those can also be blocked.
My suggestion is for willing sites to frequently update their SRV records with new/current list of authoritative root IPs that support DoH. Supporting mainstream sites can also do that, so when you visit these sites you have the latest root list, and if that list is dynamic enough (have static root IPs but make them reachable with IPs that change all the time) blocking the system becomes a whack-a-mole and the difficulty is set by network size and how many new root resolver's can be added (DHT over https might help too).
- nobody9999 3y ago>But I admit, that also makes firefox hostile to corporate environments. If only firefox obeyed windows system/gpo/registry settings like chrome. I have never seen a non-tech company even permit firefox in their IT policy for these and other reasons anyways. Perhaps I'm missing your point, but Firefox does (and I use it in my own AD forest) provide Group Policy[0] management support. [0] https://support.mozilla.org/en-US/kb/customizing-firefox-using-group-policy-windows# https://support.mozilla.org/en-US/kb/customizing-firefox-usi...
- _8j50 3y agoFirefox requires special config but Chrome uses a lot of the same settings/policies set for IE and now Edge. But this isn't my area, mostly repeating what I've been told.it also lacks the equivalent of chrome enterprise telemetry/management. But pleae correct me if I am wrong there.
- nobody9999 3y ago>Firefox requires special config but Chrome uses a lot of the same settings/policies set for IE and now Edge. Not according[0] to Google. Chrome and Firefox are both managed through group policy templates published by Google and Mozilla, respectively. [0] https://storage.googleapis.com/support-kms-prod/vB6e8QUlyKUJmlVUMpOrLhTzUrzZA5G7O71t?sjid=9211023560862049630-NA https://storage.googleapis.com/support-kms-prod/vB6e8QUlyKUJ...
- RobotToaster 3y agoI've been using OpenNIC as my primary DNS for a while.
- midasuni 3y agoWhy would to want my applications to use what my operating system does? I control both, but typically I have more control over the OS, and importantly it’s a single location to configure.
- _8j50 3y agoYou always have more control over the browser than the OS. Every major browser already does this with DoH support.
- midasuni 3y agoHow could I possibly have more control over a browser? I have multiple applications that resolve DNS, I want to configure their resolver in a single location. Maybe I want to run systemd-resolved, maybe I want to run dnsmasq, maybe I want to point to a central dns server on my network I don’t want my browser independently ignoring my piguard, or ignoring my local dns entries. Nor do I want to have to configure my browser separately from the majority of my software which obeys my instructions, life is too short. DNS is a system level resource. I configure it with dhcp, giving me a single location to configure no matter told it’s my phone, desktop, laptop, other laptop, or any other device. All block certain sites for various reasons. It is my softwares responsibility to listen to my instructions. Sadly it seems more common for browsers to ignore my instructions. Unsurprising when the most common browser is run by an ad company.