Hacker News Reader

Comment by supakeen | Hacker News Reader

It's likely that the assumption is that in 'enterprise' or large organizations software installation and configuration is managed or that they fall back if they can't (but as the blog post says; DNS over HTTPS is hard to block).

View on HN

I've not seen many orgs manage FF settings. Typically AD policies apply to MSIE/Edge. Has this changed?

As a single data point, my current and quite large company manages firefox settings. I discovered this when they turned off the search in address bar feature...

Cool. I hope this is becoming more prevalent. A coworker gave me a link to the policy (for windows) [1]

[1] - https://support.mozilla.org/en-US/kb/customizing-firefox-usi...

If anyone wonders why anyone would do that it might be because the autocomplete in search bar leaks metadata not only about what you search but also about what sites you visit.

It seems many orgs manage to shoot themselves in the foot quite badly with centrally managed browser. In all the environments I've seen, IT have managed to disable auto-update on Chrome or Firefox and break the centrally managed updates for a long time, creating an easy avenue for malware or worse to get in.

With BYOD that is less and less likely to be true..

And Android P is already gearing up to DNS over HTTPS as well with Android itself going with DNS over TLS.

Don't know what the iOS stance on this is.

Reply on news.ycombinator.com