The point of DoH is preventing 'others' - such as ISPs - from snooping and inter... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		madeofpalk on July 20, 2022 \| parent \| context \| favorite \| on: DNS-over-HTTP/3 in Android The point of DoH is preventing 'others' - such as ISPs - from snooping and interfering with plain-text DNS queries. Encrypting network traffic is generally good. Anything that hijacks DNS requests is going to no longer work, as designed. Devices should still allow setting a custom DoH server, and they should use it. You should still be able to run your own DoH server and use that. Any device/software that ignores your network settings (such as classic DNS or DoH) is bad, just like an ISP intercepting your DNS requests is bad.

magicalhippo on July 20, 2022 [–]

So which DHCP option do I use for DoH? All I can find is some expired RFC draft[1].

[1]: https://tools.ietf.org/id/draft-peterson-doh-dhcp-01.html

detaro on July 20, 2022 | [–]

https://datatracker.ietf.org/doc/draft-ietf-add-ddr/ is the current approach

magicalhippo on July 20, 2022 | | [–]

Thanks! More involved but more flexible it seems.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact