Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox 143 for Android to introduce DoH

blog.mozilla.org

Post reply on HN
Print view View original

61–70 of 121 posts

Re: Firefox 143 for Android to introduce DoH

#61

Post by cogman10 »

e12e wrote: post #52
lucideer wrote: post #45

Earlier quoted context omitted.

Because there are fewer actors to trust. In the OS you need to trust (1) the OS vendor, (2) the client vendor & (3) any VPN app or HTTP intermediary that's integrated with OS network APIs. In the client you need only to trust the client vendor.

Surely you're at the mercy of the hardware vendor and os in either case? Granted, the os would need to read your address space, not simply supply a recording DNS API, but still...

The hardware and OS in the case of DoH only gets the IP address for the connection. It's not horribly hard to figure out who owns that IP address, but it's definitely harder than just reading a domain name.

Re: Firefox 143 for Android to introduce DoH

#62

Post by thyristan »

khc wrote: post #59
thyristan wrote: post #9

Earlier quoted context omitted.

Query statistics is valuable data you can sell. Client DNS queries are in that regard similar to search queries and a default search engine setting, you can sell that to the highest bidder. So browser makers are incentivized to implement their own resolver with its own set of DNS servers instead of just the system ones. Either because they want to sell those statistics themselves. Or because they want to protect thei…

the browser, being the originator of these DNS queries, already knows what website you are visiting.

Yes, but for a browser to be overtly reporting visited sites somewhere is often seen as dubious. Doing it stealthily by sending DNS queries less so, at least for less knowledgeable observers.

Re: Firefox 143 for Android to introduce DoH

#63

Post by bigstrat2003 »

DetroitThrow wrote: post #17
idiotsecant wrote: post #15

Earlier quoted context omitted.

[flagged]

Kind of wish brand new accounts would get auto-banned if they get comments flagged within a certain timeframe of their creation.

And I wish people wouldn't flag a post because they disagree with it, rather than because it violates the rules.

Re: Firefox 143 for Android to introduce DoH

#64

Post by lucideer »

e12e wrote: post #52
lucideer wrote: post #45

Earlier quoted context omitted.

Because there are fewer actors to trust. In the OS you need to trust (1) the OS vendor, (2) the client vendor & (3) any VPN app or HTTP intermediary that's integrated with OS network APIs. In the client you need only to trust the client vendor.

Surely you're at the mercy of the hardware vendor and os in either case? Granted, the os would need to read your address space, not simply supply a recording DNS API, but still...

You're at the mercy of the hardware in all cases. You can't do anything without trusting some external party unless you make an apple pie from scratch, but reducing the number of parties needing trusting is usually a good security approach.

Re: Firefox 143 for Android to introduce DoH

#68

Post by future10se »

dbcooper wrote: post #39

Firefox for Android is some of the worst software I've ever used. A lot of extensions won't work in it, and even Edge Canary is far better with them. It is extremely slow, and the UI is horrible. I'm running it on a device with a Qualcomm SM8635 Snapdragon 8s Gen 3 chipset, and it just crawls. The UI is very unresponsive, and page load times are terrible. It also has to reload the page if it was running in the backgr…

Strange, I am running it on a Snapdragon 8 Gen 2 (Z Fold 5), and it's totally fine for me. (If anything, it's a little too good at staying in the background; if you have private tabs open it insists on persisting in memory.)

Not saying your issues aren't real, but rather maybe there's another app or your manufacturer's flavor of Android that's causing the issue (like those aggressive background killers).

As for Edge, I used to be a big fan, but when they finally introduced history and tab syncing in 2021, it didn't have E2EE, and it still doesn't, which I find inexcusable. All the other major browser vendors offer it, even Google (though you have to opt in).

Re: Firefox 143 for Android to introduce DoH

#70

Post by NdMAND »

Single-handedly, Firefox (independently from how crappy it can be at times) is what is keeping me on Android. Its full extension support (i.e.: uBlock Origin support) is something that I can't really do without. I do wonder if the crowd here knows of other good alternatives though - specifically, Android and/or iOS browsers with "full" uBlock Origin support (no uBlock origin lite, no other blocker, ...). I would love to be made aware of a few alternatives. I am aware that there is a browser from Kagi that works on iOS (I think?) but it's still in beta and closed sourced so not ready for prime time on my device. I am also aware of some peers of Firefox like Waterfox.
Post reply on HN