3 ms·
As jeremiads go, this is golden. I for one and persuaded and am grateful you wrote it. I hadn't considered before that DoH effectively takes an avenue away fro
by hkt 3y ago
As jeremiads go, this is golden. I for one and persuaded and am grateful you wrote it.
I hadn't considered before that DoH effectively takes an avenue away from people who want to block advertising and trackers. This makes it a fiercely unpleasant thing working against users.
Personally, I'm switching to DNS over TLS instead.
- josephcsible 3y agoThere are ad-blocking DoH servers available. How is DoT any better than DoH in that respect?
- briHass 3y agoBecause, at least with plain ol UDP DNS, I can masquerade my adblocking DNS server to any IoT junk that ignores my DHCP provided DNS servers and uses its own hardcoded one. DoT is obviously immune to that, as is DoH, but at least for DoT, that seemes to never have become popular, likely due to the fear of aggressive firewalls not allowing that port.
- growse 3y ago> Because, at least with plain ol UDP DNS, I can masquerade my adblocking DNS server to any IoT junk that ignores my DHCP provided DNS servers and uses its own hardcoded one. > DoT is obviously immune to that, as is DoH, but at least for DoT, that seemes to never have become popular, likely due to the fear of aggressive firewalls not allowing that port. What happens when your junky hostile devices start doing name resolution over a protocol that doesn't look like DNS? Like, say, HTTPS!