Hacker News Reader

Comment by throwawaynihil | Hacker News Reader

The only thing DoH gives anybody .. is even more of your private data to a centralized provider with questionable ethics, and the only company more ethically questionable than Google is Palantir. Run your own local resolver and move on with your life.

View on HN

> ... private data to a centralized provider with questionable ethics

What, like your ISP?

Not everybody lives in the US. I trust my ISP. They are cool, and their handling of my data is regulated under the GDPR and other laws. CloudFlare? Not so much.

I am also not in the US. However, everywhere I look I see large ISPs with questionable ethics who are centralized providers of DNS.

I'm struggling to see why DoH means "is even more of your private data to a centralized provider with questionable ethics", which is what the OP said.

Mozilla is rolling this out in the US, where there are few ISPs across the nation.

Rather than putting real effort into this, I'm just going to say that Paul Vixie, the creator of DNS, advocates for using a local resolver (not your ISP's resolver), and DNSSEC. The internet is supposed to be decentralized, not centralized.

Cloudflare, Google, and all of these other centralized dns/ntp services are hazardous to our health.

I'm sure you're very knowledgable, but if Paul gives DNS advice, listen to him.

> Rather than putting real effort into this

Ah, you're too busy to make the case. Aren't we all.

> DNSSEC. The internet is supposed to be decentralized, not centralized.

DNSSEC centralises the DNS system with governments.

> Cloudflare, Google, and all of these other centralized dns/ntp services are hazardous to our health.

Saying it doesn't make it so.

> I'm sure you're very knowledgable, but if Paul gives DNS advice, listen to him.

I'm familiar with Paul's view. Given that most people can't or won't run a local resolver, how does it help?

Reply on news.ycombinator.com