Hacker News Reader

Parent Full thread

nimrody

They say it will be enabled only for providers supporting this. Do they mean DNS servers supporting DoH?

If a network DHCP server publishes a local DNS server that is not on the list, DNS traffic will not bt encrypted?

So a network operator wishing to continue spying on its users just needs a local DNS proxy?

View on HN

> They say it will be enabled only for providers supporting this. Do they mean DNS servers supporting DoH?

No, they say providers, and mean providers. They are starting their experiment with a whitelist:

* https://www.chromium.org/developers/dns-over-https

If you're already using one of those then Chrome/ium will change from "plain DNS" over to DoH. If you are not using one of them already, then nothing will change.

Reply on news.ycombinator.com