Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NextDNS Joins Firefox’s Trusted Recursive Resolver

blog.mozilla.org

Post reply on HN
Print view View original

11–20 of 146 posts

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#11

Post by kardos »

giancarlostoro wrote: post #6
jtbayly wrote: post #3

Is there going to be an option in FF to select which “trusted partner” to use? And an option to use a provider not in their list?

Or an option to randomize it per request with the ability to remove / blacklist specific partners. Now that would be great.

Not sure that randomizing is going to do anything useful.

Randomizing over three providers will give each of them one third of your requests, but they would just need more time to get a (near) complete list of the domains you resolve. Eg, if you resolve hackernews once a day, they'll each have that information in approximately three days.

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#12

Post by thayne »

fiysp wrote: post #4
jtbayly wrote: post #3

Is there going to be an option in FF to select which “trusted partner” to use? And an option to use a provider not in their list?

There already is in advanced network options I think?

yes. And "trusted partner" just means they have preconfigured settings in the drop down. It's also possible to specify a custom DoH provider (or disable DoH).

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#13

Post by sp332 »

cremp wrote: post #10

I never heard of NextDNS. I am appalled. From their site: https://nextdns.io > See what's happening on your devices with in-depth Analytics and real-time Logs. > Protect your kids and control what they can access online. Their pricing page is also extremely troubling. > We may adjust this later on based on actual costs at scale, but it will follow this logic. What the hell is this Mozilla... This is not a company you…

If not specifically requested by the user, no data is logged. Some features require some sort of data retention. In that case, our users are given the option, control, and full access on what is logged and for how long.

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#14

Post by core-questions »

cremp wrote: post #10

I never heard of NextDNS. I am appalled. From their site: https://nextdns.io > See what's happening on your devices with in-depth Analytics and real-time Logs. > Protect your kids and control what they can access online. Their pricing page is also extremely troubling. > We may adjust this later on based on actual costs at scale, but it will follow this logic. What the hell is this Mozilla... This is not a company you…

> Protect your kids and control what they can access online.

Yes, god forbid some parents would like to have a little bit of control and the ability to protect their children from seeing obscene material when they're too young to handle it.

Evil! Mozilla needs to quash these terrible people! May they burn with Brendan Eich!

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#15

Post by thayne »

cremp wrote: post #10

I never heard of NextDNS. I am appalled. From their site: https://nextdns.io > See what's happening on your devices with in-depth Analytics and real-time Logs. > Protect your kids and control what they can access online. Their pricing page is also extremely troubling. > We may adjust this later on based on actual costs at scale, but it will follow this logic. What the hell is this Mozilla... This is not a company you…

the monitoring and blocking features are not enabled by default.

The pricing model is certainly troubling though.

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#16

Post by saagarjha »

core-questions wrote: post #14
cremp wrote: post #10

I never heard of NextDNS. I am appalled. From their site: https://nextdns.io > See what's happening on your devices with in-depth Analytics and real-time Logs. > Protect your kids and control what they can access online. Their pricing page is also extremely troubling. > We may adjust this later on based on actual costs at scale, but it will follow this logic. What the hell is this Mozilla... This is not a company you…

> Protect your kids and control what they can access online. Yes, god forbid some parents would like to have a little bit of control and the ability to protect their children from seeing obscene material when they're too young to handle it. Evil! Mozilla needs to quash these terrible people! May they burn with Brendan Eich!

"Protecting your kids" is often "we log everything and have complete visibility over how people are using our service, and we're willing to share a bit of that with parents to spy on their children". It's a valid concern to have unless there's evidence to the contrary.

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#17

Post by cremp »

core-questions wrote: post #14
cremp wrote: post #10

I never heard of NextDNS. I am appalled. From their site: https://nextdns.io > See what's happening on your devices with in-depth Analytics and real-time Logs. > Protect your kids and control what they can access online. Their pricing page is also extremely troubling. > We may adjust this later on based on actual costs at scale, but it will follow this logic. What the hell is this Mozilla... This is not a company you…

> Protect your kids and control what they can access online. Yes, god forbid some parents would like to have a little bit of control and the ability to protect their children from seeing obscene material when they're too young to handle it. Evil! Mozilla needs to quash these terrible people! May they burn with Brendan Eich!

I'm not saying that the product doesn't have it's use, but it is not how DoH should work.

I'm trying to bolster the point that they are promoting logs and more importantly, blocking DNS queries.

How can I trust the DoH endpoint if I know they have an active product whose purpose is to log and not give back the requested IP.

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#18

Post by thayne »

I'm not sure how I feel about Firefox's strategy for DoH. On the one hand, moving DNS out of the hands of ISPs that (at least in the US) have no real incentive to respect user privacy is probably a good thing. On the other hand, circumventing the system DNS will cause problems for anyone who has explicitly configured DNS, such as corporate networks, schools, households that use DNS for security/adblocking/parental controls, etc. I realize firefox has some heuristics to try and detect these cases, but heuristics aren't perfect.

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#19

Post by core-questions »

saagarjha wrote: post #16
core-questions wrote: post #14

Earlier quoted context omitted.

> Protect your kids and control what they can access online. Yes, god forbid some parents would like to have a little bit of control and the ability to protect their children from seeing obscene material when they're too young to handle it. Evil! Mozilla needs to quash these terrible people! May they burn with Brendan Eich!

"Protecting your kids" is often "we log everything and have complete visibility over how people are using our service, and we're willing to share a bit of that with parents to spy on their children". It's a valid concern to have unless there's evidence to the contrary.

I assume every single DNS provider is logging and, if possible, selling my data. Why wouldn't I? This is actually why I use my own DNS server and resolve against the root, like anyone else who cares about privacy ought to be doing.

Still, if your goal is to block your kids' access to things, DNS is a good place to do it. Works across all your devices and doesn't require any install.

Re: NextDNS Joins Firefox’s Trusted Recursive Resolver

#20

Post by threatofrain »

saagarjha wrote: post #16
core-questions wrote: post #14

Earlier quoted context omitted.

> Protect your kids and control what they can access online. Yes, god forbid some parents would like to have a little bit of control and the ability to protect their children from seeing obscene material when they're too young to handle it. Evil! Mozilla needs to quash these terrible people! May they burn with Brendan Eich!

"Protecting your kids" is often "we log everything and have complete visibility over how people are using our service, and we're willing to share a bit of that with parents to spy on their children". It's a valid concern to have unless there's evidence to the contrary.

Further, any mention of homosexuality is often considered to be inherently and unmistakably morally obscene, such as by the One Million Moms group, or as described by various state GOP platforms. This would include the narratives on whether lesbian or gay parents exist.
Post reply on HN