Hacker News Reader

I am personally excited about DNS-over-HTTPS-over-TOR. No one can see what DNS you are requesting except for the TOR hidden DNS service which does not know who you are. Seems like the best possible mass-usage of TOR. Anyhow, that is my prediction where the next DNS war takes place.

View on HN

Cloudflare has done this: https://blog.cloudflare.com/welcome-hidden-resolver/

Connecting to a centralized DNS provider over tor defeats the purpose of tor and makes it easy to deanonymize your traffic completely.

Does it? If you use regular DNS, how would it identify your requests? (as it cannot rely on the IP address)

For DoH, I guess there are more pitfalls to avoid (http cookies, connection reuse, tls session cookies, etc), but those are all things you can avoid if you configure your client correctly. I don't see how using a centralised provider would automatically compromise your privacy.

(It's playing with fire though, I admit that)

Reply on news.ycombinator.com