I can see this is comes from a DNS-focused blog, but a little background info on the subject would really improve the quality of the article.
I can see this is comes from a DNS-focused blog, but a little background info on the subject would really improve the quality of the article.
This has the benefit of encrypting your dns lookups so that people reading packets can't read them.
However, your pc and the DOH provider still can read/store/analyze/sell your dns lookups.
Your isp is probably selling your dns lookup data. So do you trust cloudflare more than your isp?
The primary issue is that this bypasses the normal dns mechanisms built into your local network. No more blocking sites using DNS. Presumably, ad block in your browser will still work. But things like pi-hole will suffer.
Though one wonders if ISPs and countries can use the same strategy to mitigate any benefit of Firefox's strategy here.
> DNS over HTTPS meanwhile encrypts DNS queries going over the network, which means that no one between you and the DoH server can see your DNS queries or modify the DNS responses.
DoH - DNS over HTTP(S)
DoT - DNS over TLS. Often meaning DTLS
ADD - Applications doing DNS, where the application is sending DNS queries instead of asking the OS resolver. Usually implied to be HTTPS as well.