Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It will actually not be used anymore, because firefox avoids your local DoH setup.


> For starters, Mozilla said that after it turns on DoH by default for US users, Firefox will contain a mechanism to detect the presence of any local parental control software or enterprise configurations.

> Additionally, Mozilla is also working with ISPs to make sure users won't use DoH as a way to bypass legally-set blocklists.

> The organization said it's been asking ISPs and providers of network-based parental control solutions to add a "canary domain" to their blocklists. When Firefox will detect that this canary domain is blocked, it will disable DoH to prevent the feature to be used as a filter-bypassing solution.

https://www.zdnet.com/article/mozilla-to-gradually-enable-dn...

And I'm already set for the DoH switch https://i.imgur.com/GuP5a8F.png


Doesn't this completely defeat the whole thing?

Anyone upstream that wants to start censoring or logging can just add this canary domain and continue business as usual.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: