Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox 143 for Android to introduce DoH

blog.mozilla.org

Post reply on HN
Print view View original

111–120 of 121 posts

Re: Firefox 143 for Android to introduce DoH

#111

Post by TingPing »

vanc_cefepime wrote: post #91
NdMAND wrote: post #70

Single-handedly, Firefox (independently from how crappy it can be at times) is what is keeping me on Android. Its full extension support (i.e.: uBlock Origin support) is something that I can't really do without. I do wonder if the crowd here knows of other good alternatives though - specifically, Android and/or iOS browsers with "full" uBlock Origin support (no uBlock origin lite, no other blocker, ...). I would love…

Orion (by Kagi) with full ublock origin on iOS, atleast that was the case about 6 months ago that I am aware of on Apple’s ecosystem. I’ve long jumped to pihole/adguard home to block ads at the router level so I went back to stock safari after that and use Tailscale to retain the router blocking capabilities when I’m on cell service.

This simply isn’t true, webkit cannot support ublock origin atm.

https://docs.google.com/spreadsheets/d/14IgSRVop4psUTgtLZlvY...

The request modification apis specifically.

Re: Firefox 143 for Android to introduce DoH

#112

Post by gertop »

hulitu wrote: post #93
mikae1 wrote: post #83

Earlier quoted context omitted.

It's been accessible via about:config, yes. But more importantly, there's a system wide DoH setting in Android (or at least in GrapheneOS). I don't see why it would preferable to only configure DoH in the browser.

> It's been accessible via about:config, yes. Am i the only one for which about:config does nothing on Firefox on Android ?

about:config is only available on Firefox Nightly because reasons.

With the workaround in the sibling comment it can be accessed in both Firefox stable and Firefox Focus.

Re: Firefox 143 for Android to introduce DoH

#113

Post by j16sdiz »

dingi wrote: post #85

DoH is a technical win but a practical regression for anyone who actually runs their own DNS. With classic DNS, you could hand out your resolver via DHCP and transparently control local zones. With DoH, that's gone. You have to configure each client explicitly, because the traffic is wrapped in HTTPS and can't be intercepted. And the defaults don't help: instead of your ISP seeing your queries, now it's Cloudflare, G…

> you could hand out your resolver via DHCP and transparently control local zones. With DoH, that's gone.

Checkout RFC9463

Re: Firefox 143 for Android to introduce DoH

#114

Post by StuPC2000 »

sersi wrote: post #55
MrAlex94 wrote: post #32

Not sure why it took so long for Mozilla to expose the setting on Android, it's been a 'secret' setting for a long time. In fact, sometimes they let features ride the rails for a little bit too long IMO. For Waterfox for Android I exposed the setting by default and also added an addition DNS over Oblivious HTTP setting (DoOH) which uses Fastly as the relay (they host and control it, for privacy sanitisation) and Clou…

Hey, just wanted to say thanks for your work on Waterfox!

Seconded!

Re: Firefox 143 for Android to introduce DoH

#115

Post by MrAlex94 »

temp0826 wrote: post #56
MrAlex94 wrote: post #32

Not sure why it took so long for Mozilla to expose the setting on Android, it's been a 'secret' setting for a long time. In fact, sometimes they let features ride the rails for a little bit too long IMO. For Waterfox for Android I exposed the setting by default and also added an addition DNS over Oblivious HTTP setting (DoOH) which uses Fastly as the relay (they host and control it, for privacy sanitisation) and Clou…

> DoOH How is the latency?

While this was measured in a slightly different implementation via Oblivious DNS[1]:

> The first thing that we can say with confidence is that the additional encryption is marginal. We know this because we randomly selected 10,000 domains from the Tranco million dataset and measured both encryption of the A record with a different public key, as well as its decryption. The additional cost between a proxied DoH query/response and its ODoH counterpart is consistently less than 1ms at the 99th percentile.

[1]: https://blog.cloudflare.com/oblivious-dns/#what-about-perfor...

Re: Firefox 143 for Android to introduce DoH

#116

Post by MrAlex94 »

mikae1 wrote: post #83
MrAlex94 wrote: post #32

Not sure why it took so long for Mozilla to expose the setting on Android, it's been a 'secret' setting for a long time. In fact, sometimes they let features ride the rails for a little bit too long IMO. For Waterfox for Android I exposed the setting by default and also added an addition DNS over Oblivious HTTP setting (DoOH) which uses Fastly as the relay (they host and control it, for privacy sanitisation) and Clou…

It's been accessible via about:config, yes. But more importantly, there's a system wide DoH setting in Android (or at least in GrapheneOS). I don't see why it would preferable to only configure DoH in the browser.

Not just `about:config`, which is limited to non-release builds, but via enabling “Secret Settings” when you enable debug mode: https://firefox-source-docs.mozilla.org/mobile/android/fenix...

This allowed access from the standard settings page which you can see in this release, it’s the same setting just exposed instead of hidden.

I think Nimbus experiments also might have exposed the setting.

Re: Firefox 143 for Android to introduce DoH

#117

Post by TiredOfLife »

vanc_cefepime wrote: post #91
NdMAND wrote: post #70

Single-handedly, Firefox (independently from how crappy it can be at times) is what is keeping me on Android. Its full extension support (i.e.: uBlock Origin support) is something that I can't really do without. I do wonder if the crowd here knows of other good alternatives though - specifically, Android and/or iOS browsers with "full" uBlock Origin support (no uBlock origin lite, no other blocker, ...). I would love…

Orion (by Kagi) with full ublock origin on iOS, atleast that was the case about 6 months ago that I am aware of on Apple’s ecosystem. I’ve long jumped to pihole/adguard home to block ads at the router level so I went back to stock safari after that and use Tailscale to retain the router blocking capabilities when I’m on cell service.

Kagi is directly working with Russia, so anything touched by them is out.

Re: Firefox 143 for Android to introduce DoH

#118

Post by TiredOfLife »

alerighi wrote: post #40
LiamPowell wrote: post #2

This doesn't address why this needs to be built in to the browser when Android already does DoH by itself. I assume there's a reason, does anyone know what it is?

First not all Android versions do that, and not all vendors implement that. Not everyone is running the latest version and has a Google Pixel. Second passing from the OS is less secure since there are a multitude of actors, Google, the device vendor, eventual VPN app, etc. that could get access to that queries (in fact apps to block ADS such as ADAway if you don't have root use VPN functionality to intercept DNS quer…

My Samsung phone is on android 9 (released 7 years go) and has DoH

Re: Firefox 143 for Android to introduce DoH

#119

Post by edelhans »

NdMAND wrote: post #70

Single-handedly, Firefox (independently from how crappy it can be at times) is what is keeping me on Android. Its full extension support (i.e.: uBlock Origin support) is something that I can't really do without. I do wonder if the crowd here knows of other good alternatives though - specifically, Android and/or iOS browsers with "full" uBlock Origin support (no uBlock origin lite, no other blocker, ...). I would love…

Edge for Android also has (limited) extension support. It only supports a subset of extensions, but I am using uBlock Origin (full version, although _lite_ is also available), Sponsorblock and Dark Reader for example.
Post reply on HN