Why not use DNS over HTTPS (DoH)?
Why not use DNS over HTTPS (DoH)?
Bruh I'm still so confused about this - can any #networking people or anyone with #PiHole/#Pi-hole experience chime in and tell if my goal is privacy, and if I were to prioritise one, it'd be better privacy against my ISP, what should I use on my Pi-hole DNS server?
- #Unbound as a recursive DNS server
- Enable #DNS-Over-TLS (#DoT) using Unbound and upstream DNS provider set to something like #Cloudflare
- or Enable #DNS-Over-HTTPS (#DoH) using #Cloudflared
I initially thought you could have Pi-hole be all three but I don't think so, no?
If any unethical network operator (or government) can disable DoH on clients with a simple DNS flag, then what problem does DoH solve?
It stops you from blocking ads on the DNS level. That's all it was ever supposed to solve.
Disable DoH. Reject DoH.
I wrote a very basic #Ansible playbook to help people set up #PiHole with #DNSOverHTTPS (#DoH) directly installed on a Debian-based host (Raspberry Pi or small VM). It's available on my GitHub repo. I hope you find it useful! #HomeLab #SelfHosted
https://github.com/badnetmask/miscelaneous/tree/main/ansible/pihole-doh
Bref, Mozilla a activé #EncryptedClientHello dans #Firefox 118 , mais uniquement s'il est configuré pour utiliser #DNSoverHTTPS.
Y en dans Chrome aussi, a priori avec les mêmes conditions pour en profiter (ça semblerait logique)
J'ai testé 5 minutes Windows 11 dans une VM VirtualBox pour essayer de voir comment y configurer #DNSoverHTTPS à l'échelle du système :
- Ça rame comme pas permis
- Impossible de d'améliorer ça (je pense que c'est la transparence qui fait ramer, mais faut une licence pour désactiver)
- Impossible de monter la résolution à plus de 1280×960 (licence toussa)
- Système en français, clavier en QWERTY, parce que
- Trouvé les paramètres DoH : marche pas, prend pas en compte les modifs
VM effacée
habrastorage.org
Обход блокировок: настройка сервера XRay для Shadowsocks-2022 и VLESS с XTLS-Vision, Websockets и фейковым веб-сайтом
_habr.com/ru/articles/728836/ #dns2socks #чебурнет #adguard #Shadowsocks #DNSCryptProxy2 #роскомпозор #ODoH #обход_блокировок #docker #DNS-proxy #DNSSEC #doh #unbound #DoQ #privacy #antiZapret #DNS #dnsleaktest #ТСПУ #wireguard #суверенный_рунет #DNSCrypt #блокировка_VPN #сувенирный_интернет #АСБИ #DNS-over-HTTPS
Die schwierige Suche nach Quantencomputer-sicherer Kryptografie
Quantencomputer der nächsten Generation würden asymmetrische kryptografische Schlüssel schnell knacken. Das gefährdet auch das weltweite Domain Name System.
#Algorithmen #DNS #DNSoverHTTPs(DoH) #DNSSEC #GitHub #Internetprotokolle #Quantencomputer #Security #Verschlüsselung
@hermogenes I pretty much agree with you, actually. I have used #Firefox for years and appreciated what goes into it, and of course their recommendation is still... Firefox, with changed settings.
That said, I've recently tried out #LibreWolf, itself a Firefox fork. And, wow. The privacy game is so much nicer out of the box; I need far fewer plugins and it's all just... working. Very, very impressed.
Re #DNSoverHTTPS (#DoH), I guess it's: who's your adversary? Sketchy wifi or CloudFlare?
Slap This Big Red Button for an Instant Social Media Detox - Dangerous machines, like ones that can quickly reduce you to a fine red mist or a ... - https://hackaday.com/2022/09/30/slap-this-big-red-button-for-an-instant-social-media-detox/ #internethacks #dnsoverhttps #socialmedia #blocker #wemosd1 #detox #doh #iot #spi #vpn
Nice, so I have DoH and DoT running!
DoT is sadly not fully configured on the client side yet due to missing SNI headers that is caused by NetworkManager and systemd-resolved. But I work on that one:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/528
[#BotActu] « Comcast’s Xfinity Internet Service Joins Firefox’s Trusted Recursive Resolver Program » https://blog.mozilla.org/blog/2020/06/25/comcasts-xfinity-internet-service-joins-firefoxs-trusted-recursive-resolver-program/ #TrustedRecursiveResolver(TRR) #InternetServiceProvider(ISP) #PressReleases #DNSoverHTTPS #MozillaNews #Statement #Firefox #Privacy #DoH
I'll just hold off adopting #DNSoverHTTPS for now.
#OpenDNS #DOH (doh.opendns.com) is weird:
Google and CloudFlare don't have these problems, so if I want #DNSoverHTTPS, I have to decide between these two. (NextDNS is not an option because I don't need filtering and don't want to register an account with them.)
#dnsoverhttps ( #DoH) arrive dans #windows10 : comment ça marche ?
https://www.nextinpact.com/news/107261-dns-over-https-doh-arrive-dans-windows-10-comment-ca-marche.htm
#Microsoft adds initial support for #dnsoverhttps ( #DoH) in #Windows Insiders.
https://www.zdnet.com/article/microsoft-adds-initial-support-for-dns-over-https-doh-in-windows-insiders/#ftag=RSSbaffb68
A #firefox tip to avoid #github and other #DNSCensorship currently going on in #Spain
https://diaspora-fr.org/posts/4627397
(What? An EU country censoring github? Are they going crazy? Oô)
#doh #dnsoverhttps cc @bortzmeyer tu es probablement au jus de ce qui se passe là-bas mais bon.
[Repost due to dead URL]
There was recently a lot of news about DNS over HTTPS. Some people say it's bad for privacy because it centralizes the DNS requests on Google, Cloudflare and Quad9.
Time to change that and run your own DNS over HTTPS server. I spend some time today in writing, documenting and arranging a small container setup to allow you to do this:
https://git.shivering-isles.com/container-library/dns-over-https