3 ms·
> The user’s DNS provider would no longer be their ISP. Only if the ISP doesn't do DPI to transparently route any outgoing DNS traffic to their (censoring) ser
by mschuster91 3y ago
> The user’s DNS provider would no longer be their ISP.
Only if the ISP doesn't do DPI to transparently route any outgoing DNS traffic to their (censoring) servers. There have been enough cases of that.
- yjftsjthsd-h 3y agoDoes that work anymore with DNS over HTTPS? I think the real leak is that until we get Encrypted Client Hello your HTTPS connections expose the domain in plaintext so DNS is kind of a moot point.
- WirelessGigabit 3y agoIt does not. DoH and DoT is a real lifesaver for the privacy-minded people. And it's hell for the security minded people. Before I could do DNAT on my router to redirect everything to my Pi-Hole, even the Google Mini that staunchly ignored the handed out DNS, but used 8.8.8.8. But soon they'll start using DoH and I can't do anything anymore at all. I believe IMDb on iOS already uses DoH.