171–180 of 306 posts
Instead tunnel all traffic to some rented box in a jurisdiction of your choice and then run your own DNS resolver either in your home network or on that box.
Sigh. Mozilla had just made Firefox usable again... And now good reasons for leaving it again are coming up.
But for the majority of users, it's probably good to have Mozilla negotiate favorable terms with a DNS provider that can be subject to audits, etc.
Who audits your ISP? Does Mozilla do that?
Sorry if this is off topic but where does DNS over https leave my pi hole? Is it possible (in the future) to do dns over https from my router to the pihole and then dns over https from the pihole to Google or Cisco open DNS? How would it work? Wouldn’t the router need to trust the https certificate that my pihole presents? Thank you!
That s just a feature. You can choose not to use it. Why so much noise?
As I understand it that's even the default choice, and CloudFlare is just the provider they're currently testing this with for those who do choose and do not configure their own provider.
In contrast, DNS is very simple and can be implemented with a lot less code.
Earlier quoted context omitted.
The article doesn't suggest there's something sneaky going on. The article is suggesting that Mozilla are choosing to share your DNS queries with a third party service by default, which is exactly what they're doing. It's not about them choosing Cloudflare in particular, it's about them choosing any particular service by default. And the article's argument that, if you have to choose somebody to share this data with,…
So.. in some future Mozilla might select a default DNS provider on your behalf. Did you consider the upside? Mozilla can negotiate on your behalf. Mozilla can obtain favorable terms of service, concessions in privacy, third-party reviews. Things you would never be able to negotiate for. If you think of Mozilla as negotiating on your behalf, they have motive to protect you, and they have the leverage to get concession…
Hostnames and TLDs are different concepts in DNS. It is a mistake to conflate them.
TLDs are the top level (rightmost) part of domain names, such as specifically “com” in “example.com”.
Earlier quoted context omitted.
The feature is opt-in. Firefox will use your system configured DNS servers unless you explicitly enable DOH. In that case you can still change Cloudfare for some other server if you’d like.
The impression I got from TFA is that the feature will be on by default and you have to dig into about:config to disable it.
This proposal introduces a lot of complexity. It requires JSON parsing, HTTP and TLS. A bug in one of these components could is likely to occur. In contrast, DNS is very simple and can be implemented with a lot less code.