5 ms·
Is pihole the best solution for all this Manifest v3 stuff that Chrome is about to dump on the universe?
by sys_64738 3y ago
Is pihole the best solution for all this Manifest v3 stuff that Chrome is about to dump on the universe?
- miloignis 3y agoNo, that'd be Firefox + UBlock Origin. I believe that the DNS based blocking that pihole does would be similar to the blocklist type blocking that Chrome with manifest v3 offers. I belive the advantages of pihole are most for blocking ads on devices without an adblocker installed, like your TV or w/e.
- 3np 3y agopihole is only doing DNS filtering. Can still be good but not at all similar to the content filtering that can be done by client-side extensions. It's also becoming less effective over time due to increased adoption of domain-fronting and DoT/DoH. To get there with a hosted appliance you can run on a Raspberry Pi, you'd neet an intercepting and rewriting HTTPS proxy with the TLS certificates trusted by the client. Possible (corporates and ISPs/governments do this) but a lot more effort and security footguns than blackholing DNS lookups. Sidenote: Most HTTPS packets will still carry the destination domain unencrypted (ECH is still not widely adopted and can be filtered). So even if DoT prevents pihole from being effective, you can still route all your HTTPS traffic through something like sniproxy and drop packages based on SNI extension information. You won't need to set up certicates for this and pretty straightforward on any Linux/BSD router.
- manuelmoreale 3y agoI don’t think you have to pick one or the other. Run pihole and then put an adblocker on the client. That’s how I roll personally. NextDNS + 1Blocker / uBlock
- mksybr 3y agoPiHole was good but blocked less compared to uBlock Origin when I tested it a few months ago. https://canyoublockit.com/ https://canyoublockit.com/
- baxuz 3y agoAdguard is better as it does more than DNS level blocking, but on a local VPN level