6 ms·
Because there are fewer actors to trust. In the OS you need to trust (1) the OS vendor, (2) the client vendor & (3) any VPN app or HTTP intermediary that's int
by lucideer 1y ago
Because there are fewer actors to trust.
In the OS you need to trust (1) the OS vendor, (2) the client vendor & (3) any VPN app or HTTP intermediary that's integrated with OS network APIs.
In the client you need only to trust the client vendor.
- e12e 1y agoSurely you're at the mercy of the hardware vendor and os in either case? Granted, the os would need to read your address space, not simply supply a recording DNS API, but still...
- cogman10 1y agoThe hardware and OS in the case of DoH only gets the IP address for the connection. It's not horribly hard to figure out who owns that IP address, but it's definitely harder than just reading a domain name.
- lucideer 1y agoYou're at the mercy of the hardware in all cases. You can't do anything without trusting some external party unless you make an apple pie from scratch, but reducing the number of parties needing trusting is usually a good security approach.