Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I read the article in full.

Changing your non-DoH resolver (such as using Google Public DNS) means requests and responses can still be edited by your ISP. This is what the article is talking about.

I suggested DoH (encrypted DNS) because this is not subject to such tampering. DoH (DNS-over-HTTPS) is not the same as traditional unencrypted port 53 DNS.

Really, anyone who gives a shit about privacy should be using DoH exclusively, otherwise you are basically uploading your web history in real-time to your ISP for mining and resale.



I have been testing a large number of DoH servers. I have noticed that some names are not available across all (supposedly unfiltered) DoH servers. For example, there are some DoH servers that had no A record for webshare.io, the domain mentioned in the OP.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: