Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Turn off DoH, Firefox

ungleich.ch

Post reply on HN
Print view View original

51–60 of 422 posts

Re: Turn off DoH, Firefox

#51

Post by kadoban »

taneq wrote: post #39
Chirael wrote: post #16

It seems like this change by Firefox would bypass a pi-hole. Am I understanding it correctly?

Would it be hard to make pi-hole into a DoH provider so you could just point your browser at it? Or does that defeat the "just works" factor of the pi-hole?

Probably easier to just turn off DoH in Firefox.

In a home LAN configuration, which I'd expect is the vast majority of Pi-hole setups, I don't think you'd really be gaining anything from DoH.

And even if Pi-hole does support being a DoH server, you'd have to configure that in Firefox anyway.

Re: Turn off DoH, Firefox

#52

Post by bennyp101 »

aazaa wrote: post #30

> DoH means that Firefox will concentrate all DNS traffic on Cloudflare, and they send traffic from all their users to one entity. Why does DoH necessarily mean that Cloudflare will be handling the traffic? The article barrels right to that conclusion without explaining why.

The default setting in Firefox is to use Cloudfare as the DOH provider

Re: Turn off DoH, Firefox

#53

Post by wwright »

How will this affect using Firefox on an intranet, where there are often services and websites on a local-only DNS server? Will Firefox be unable to reach those sites by default?

Re: Turn off DoH, Firefox

#54

Post by dralley »

fimdomeio wrote: post #5

Does anyone knows why does mozilla think this is a good idea? Between each user sharing dns queries with their isps and everyone sharing dns queries with cloudflare it appears that it's obviously more secure the first approach even if none of them is really that great.

I don't see why the first approach is obviously more secure - especially considering the ISP knows your name and address.

Re: Turn off DoH, Firefox

#55

Post by treggle »

I strongly support DoH as it prevents government snooping on the public. It’s really unhelpful that people like this attack Firefox over this issue.

Stand strong Firefox against this.

Re: Turn off DoH, Firefox

#56

Post by notyourday »

askmike wrote: post #36
jfindley wrote: post #22

This is painful to read. Masses off unfounded FUD - the article deliberately buries that it's trivial to change your DoH provider if you're silly enough to believe that CF is actively logging DoH requests and selling them (CF is involved with serving vast swathes of the internet anyway - if they wanted to go down this route they have far more lucrative avenues open than selling DNS requests by IP). If instead what yo…

> if you're silly enough to believe that CF is actively logging DoH requests and selling them (CF is involved with serving vast swathes of the internet anyway - if they wanted to go down this route they have far more lucrative avenues open than selling DNS requests by IP). I don't think anyone believes CF will start selling data, that's not what the article argues. Regardless, it's opt-out not opt-in. Which is agains…

> I don't think anyone believes CF will start selling data, that's not what the article argues.

CF is not a private company funded by a foundation with a time until the funding runs out measured in 30-40 years. It is a public company with a small number of customers that provide majority of its revenue.

It simply isn't prudent to say that it won't explore other revenue streams in future and that monetization of data won't be one of those streams.

Re: Turn off DoH, Firefox

#57

Post by askmike »

jfindley wrote: post #47
askmike wrote: post #36

Earlier quoted context omitted.

> if you're silly enough to believe that CF is actively logging DoH requests and selling them (CF is involved with serving vast swathes of the internet anyway - if they wanted to go down this route they have far more lucrative avenues open than selling DNS requests by IP). I don't think anyone believes CF will start selling data, that's not what the article argues. Regardless, it's opt-out not opt-in. Which is agains…

You do not have to point your DNS queries to a US company, this is completely false. You can point your DNS queries at whichever DoH provider you want - you can even run your own DoH provider if you want to.

I should have worded that differently: the default is a US company. Which applies to everyone who doesn't change it specifically for Firefox (the vast majority of users).

Re: Turn off DoH, Firefox

#58

Post by kbumsik »

coleifer wrote: post #28

There are two points: 1. centralization of all dns lookups is worrisome 2. Dns should not be handled by applications. It should be handled by the operating system. I see a lot of people conflating the two in the comments.

> 2. Dns should not be handled by applications. It should be handled by the operating system.

I agree with #1 but why it should be managed by the OS?

Re: Turn off DoH, Firefox

#59

Post by bennyp101 »

jfindley wrote: post #22

This is painful to read. Masses off unfounded FUD - the article deliberately buries that it's trivial to change your DoH provider if you're silly enough to believe that CF is actively logging DoH requests and selling them (CF is involved with serving vast swathes of the internet anyway - if they wanted to go down this route they have far more lucrative avenues open than selling DNS requests by IP). If instead what yo…

> the article deliberately buries that it's trivial to change your DoH provider

While true for you or me, the vast majority of people will have this enabled by default - probably not even realising it's on

Post reply on HN