Hacker News Reader

I don't think this is at odds with "should do one thing well". Safety is not an application in itself, it is a design principle.

"rm"'s purpose is only to delete, yet it still tries to ensure safety and sanity with its flags: -r, -f, --no-preserve-root, etc. Even simple tools should be safe by default.

View on HN

We already have applications that can take all your traffic and send it over an encrypted tunnel somewhere else, if you don't want to exit to the Internet from a place you don't trust. They're called VPN clients. DoH is like a partial VPN client. It doesn't belong in the browser.

DoH servers are not open proxies, they're just DNS resolvers with support for a security layer; they are comparable to HTTPS, SMTPS, SSH, etc. servers, not to a VPN.

VPNs are not a substitute for, nor a better solution than DoH in the same way as they are not for HTTPS or SSH.

Reply on news.ycombinator.com