Mozilla is yet to announce an actual application process for becoming a TRR. I've been trying ever since they announced CloudFlare, but they only have a policy - no application process.
NextDNS Joins Firefox’s Trusted Recursive Resolver
61–70 of 146 posts
Re: NextDNS Joins Firefox’s Trusted Recursive Resolver
#62“For most users, it’s very hard to know where their DNS requests go and what the resolver is doing with them.” said Eric Rescorla, Firefox CTO. “Firefox’s Trusted Recursive Resolver program allows Mozilla to negotiate with providers on your behalf and require that they have strong privacy policies before handling your DNS data. We’re excited to have NextDNS partner with us in our work to put people back in control of…
I could never think of why Mozilla and friends are so aggressively pushing DoH, but I think you nailed it when you pointed out they can tie a specific device's DNS requests to its other data. I run Unbound and Pi-Hole to do my own recursive resolving. Like a normal wireless router doing all the DNS lookups for its DHCP clients, Mozilla has no idea which particular device on my network is accessing duckduckgo.com. Onc…
> For all the commenters here who think that Google and the other major tech companies are somehow less trustworthy than your ISP? Yeah, I just can't agree with those opinions.
Additionally, at least my ISP is doing business in my state/country, so there may be _some_ legal recourse if they screw me too hard.
Re: NextDNS Joins Firefox’s Trusted Recursive Resolver
#63“For most users, it’s very hard to know where their DNS requests go and what the resolver is doing with them.” said Eric Rescorla, Firefox CTO. “Firefox’s Trusted Recursive Resolver program allows Mozilla to negotiate with providers on your behalf and require that they have strong privacy policies before handling your DNS data. We’re excited to have NextDNS partner with us in our work to put people back in control of…
It's about trust: would you rather trust your ISP, or Mozilla's choice of DoH partners? Users never really had a reasonable (ie. non geek) opportunity to be in charge of their DNS privacy, and for most it's not something they can be bothered with.
My ISP, since I have a contract with them, I can switch to another ISP anytime, and they are bound to lots of data protection laws.
On the other hand, the Mozilla Corporation clearly is desperate to find alternate sources of funding.
Re: NextDNS Joins Firefox’s Trusted Recursive Resolver
#64Earlier quoted context omitted.
It's about trust: would you rather trust your ISP, or Mozilla's choice of DoH partners? Users never really had a reasonable (ie. non geek) opportunity to be in charge of their DNS privacy, and for most it's not something they can be bothered with.
My ISP, since I have a contract with them, I can switch to another ISP anytime, and they are bound to lots of data protection laws. On the other hand, the Mozilla Corporation clearly is desperate to find alternate sources of funding.
Often, I don't have a contract with my ISP. Since my ISP is a random coffee shop, the public transit provider, or so on.
Re: NextDNS Joins Firefox’s Trusted Recursive Resolver
#65Earlier quoted context omitted.
I assume every single DNS provider is logging and, if possible, selling my data. Why wouldn't I? This is actually why I use my own DNS server and resolve against the root, like anyone else who cares about privacy ought to be doing. Still, if your goal is to block your kids' access to things, DNS is a good place to do it. Works across all your devices and doesn't require any install.
> This is actually why I use my own DNS server and resolve against the root, like anyone else who cares about privacy ought to be doing. How do you prevent the ISP from logging those requests to the root?
I can't speak for them, but I do the same thing and use a VPN to resolvers on numerous VPS providers. Those talk upstream to the root servers. Between the min-ttl cache at each layer and the large number of resolvers, correlation of my DNS requests is non trivial. I also ensure that client subnet EDNS is blocked.
Re: NextDNS Joins Firefox’s Trusted Recursive Resolver
#66“For most users, it’s very hard to know where their DNS requests go and what the resolver is doing with them.” said Eric Rescorla, Firefox CTO. “Firefox’s Trusted Recursive Resolver program allows Mozilla to negotiate with providers on your behalf and require that they have strong privacy policies before handling your DNS data. We’re excited to have NextDNS partner with us in our work to put people back in control of…
I think the endgame is to route everything through Tor or a similar anonymizing layer, nothing else will suffice in the face of pervasive tracking. Incidentally, Mozilla is showing interest in embedding Tor in Firefox [1], but they haven't yet publicly commited to it [2]. [1] https://www.zdnet.com/article/mozilla-offers-research-grant-... [2] https://www.techradar.com/news/firefox-isnt-getting-a-tor-pr...
I was under the impression this work was already underway. https://wiki.mozilla.org/Security/Tor_Uplift
Re: NextDNS Joins Firefox’s Trusted Recursive Resolver
#67I'm a fan of DoH, but I'm also a Chromecast owner, so I get to experience the downsides of application-level DNS resolvers. Chromecasts will ignore the DNS servers set by DHCP, and will cease to function if they cannot communicate with Google's DNS servers[1]. That means my network-enforced DNS preferences that block ad and malware sources are ignored, and I see more ads than I want to. It also means that when Google…
I believe you are referencing possibly old data. I have a Chromecast. I also redirect all port 53 traffic (DNS) back through my own DNS server at the firewall level (does not go to Google DNS). It works perfectly fine wihtout directly using Google DNS. Yes, they do ignore the DNS set by DHCP, but that can be worked around.
Which model Chromecast do you have?
Re: NextDNS Joins Firefox’s Trusted Recursive Resolver
#68Earlier quoted context omitted.
It's about trust: would you rather trust your ISP, or Mozilla's choice of DoH partners? Users never really had a reasonable (ie. non geek) opportunity to be in charge of their DNS privacy, and for most it's not something they can be bothered with.
My ISP, since I have a contract with them, I can switch to another ISP anytime, and they are bound to lots of data protection laws. On the other hand, the Mozilla Corporation clearly is desperate to find alternate sources of funding.
You have a contract with your ISP not to collect and monetize your DNS queries to their DNS servers? Are you in the US on a mainstream ISP? If so, you surely do not, unlike with the Mozilla TRR program, where you in fact do.
Re: NextDNS Joins Firefox’s Trusted Recursive Resolver
#69Earlier quoted context omitted.
My ISP, since I have a contract with them, I can switch to another ISP anytime, and they are bound to lots of data protection laws. On the other hand, the Mozilla Corporation clearly is desperate to find alternate sources of funding.
You have a contract with your ISP not to collect and monetize your DNS queries to their DNS servers? Are you in the US on a mainstream ISP? If so, you surely do not, unlike with the Mozilla TRR program, where you in fact do.
> You have a contract with your ISP not to collect and monetize your DNS queries to their DNS servers?
You don’t ? Why would you sign up with such an ISP ? My ISP has a very clear privacy policy, and they obviously have to comply with the GDPR as well.
Re: NextDNS Joins Firefox’s Trusted Recursive Resolver
#70Earlier quoted context omitted.
You have a contract with your ISP not to collect and monetize your DNS queries to their DNS servers? Are you in the US on a mainstream ISP? If so, you surely do not, unlike with the Mozilla TRR program, where you in fact do.
> You have a contract with your ISP not to collect and monetize your DNS queries to their DNS servers? You don’t ? Why would you sign up with such an ISP ? My ISP has a very clear privacy policy, and they obviously have to comply with the GDPR as well.
In America, at least, there are only one or two high speed ISPs in any area: and so, unless you want to use DSL or satellite or something and deal with latency/speed issues, you basically pick whoever is fastest for the best price