|
||
Firefox begins the rollout of encrypted DNS over HTTPS (DoH) by default for its US-based users. According to the company, the rollout will continue over the next few weeks to confirm that no major issues are discovered as this new protocol is enabled. “[U]nencrypted DNS is not only vulnerable to spying but is being exploited, and so we are helping the internet to make the shift to more secure alternatives,” says Mozilla, the non-profit parent organization.
— How it’s done, Firefox explains: “We do this by performing DNS lookups in an encrypted HTTPS connection. This helps hide your browsing history from attackers on the network, helps prevent data collection by third parties on the network that ties your computer to websites you visit.” (Mozilla)
— The controversy: “Some internet engineers warn that DoH is a threat not just to people’s privacy, but the stability of the Internet itself. And they have been met with counterclaims that they are out of touch and don’t grasp how the Internet actually works in 2019.” (CircleID)
Sponsored byRadix
Sponsored byVerisign
Sponsored byWhoisXML API
Sponsored byDNIB.com
Sponsored byIPv4.Global
Sponsored byCSC
Sponsored byVerisign
A World-Renowned Source for Internet Developments. Serving Since 2002.
Where will the DoH connection(s) be made to, by default? Will it be easy to change in preferences or will we need to struggle with about:config? Can we use multiple DoH servers? How can I run my own DoH server? Will there be an RFC for the protocol? Will dig be taught how to use DoH? Will there be example free open source software clients and servers released to demonstrate and locally test the protocol?