Stay informed about the acquisition of Public Interest Registry

by Ethos Capital

Home / News I have a News Tip

Firefox Starts the Roll Out of DNS Over HTTPS (DoH) by Default for US-Based Users

Firefox begins the rollout of encrypted DNS over HTTPS (DoH) by default for its US-based users. According to the company, the rollout will continue over the next few weeks to confirm that no major issues are discovered as this new protocol is enabled. "[U]nencrypted DNS is not only vulnerable to spying but is being exploited, and so we are helping the internet to make the shift to more secure alternatives," says Mozilla, the non-profit parent organization.

How it's done, Firefox explains: "We do this by performing DNS lookups in an encrypted HTTPS connection. This helps hide your browsing history from attackers on the network, helps prevent data collection by third parties on the network that ties your computer to websites you visit." (Mozilla)

The controversy: "Some internet engineers warn that DoH is a threat not just to people's privacy, but the stability of the Internet itself. And they have been met with counterclaims that they are out of touch and don't grasp how the Internet actually works in 2019." (CircleID)

Follow CircleID on
Related topics: Cybersecurity, DNS, DNS Security, Web

If you are pressed for time ...

... this is for you. More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

Vinton Cerf, Co-designer of the TCP/IP Protocols & the Architecture of the Internet

Share your comments

Where will the DoH connection(s) be made Phil Howard  –  Mar 05, 2020 6:40 PM PDT

Where will the DoH connection(s) be made to, by default?  Will it be easy to change in preferences or will we need to struggle with about:config?  Can we use multiple DoH servers?  How can I run my own DoH server?  Will there be an RFC for the protocol?  Will dig be taught how to use DoH?  Will there be example free open source software clients and servers released to demonstrate and locally test the protocol?

To post comments, please login or create an account.




Sponsored byWhoisXML API

IP Addressing

Sponsored byAvenue4 LLC

DNS Security

Sponsored byAfilias

New TLDs

Sponsored byAfilias


Sponsored byVerisign


Sponsored byThreat Intelligence Platform

Brand Protection

Sponsored byAppdetex

Domain Names

Sponsored byVerisign