This is what the Mozilla Corporation didn't get when they decided to send by default all the DNS traffic to Cloudflare. Or, perhaps, they did get it right...
This is what the Mozilla Corporation didn't get when they decided to send by default all the DNS traffic to Cloudflare. Or, perhaps, they did get it right...
I hope more DNS servers support DNS over HTTPS soon because my options for using it are:
- CloudFlare - self hosted with CloudFlare's code
Not a lot of options there...
Now, if I were in the US, I might arrive at very different conclusions, given how lax consumer protection laws are in general, how the US ISPs have a (recent) history of collecting and selling data and using other dirty tricks (like redirecting NXDOMAIN to their own adservers), and how in many if not most places in the US you have no freedom of choice in ISPs and are essentially subject to an ISP monopoly or duopoly in your area.
Deutsche Telekom isn't exactly evil, but it just handles far more data, of far higher value, including many bespoke government and business networks, phone networks, etc. The risk of their network being compromised seems higher.
ISPs have historically been evil far more often than other types of businesses, because they often are in the strong position of being the only or one of just a few options, and because switching ISPs is far more hassle than choosing one website over another. I would consider the chance of Telekom trying to squeeze another buck out of the relationship to be far higher than Cloudflare. IIRC Telekom did at some point get into the NXDOMAIN game?
I have not relationship with Cloudfare. I don't want them to have data about me. I never signed a contract with them.
The last mile fibre is provided by a company called OpenReach. I don't deal with them, they sell the service to the ISPs at a regulated wholesale price, it's those ISPs that add their services (like IP connectivity, transit, etc) onto the top
Depending on the regulations (this is true some of the EU)
On the other hand, Cloudflare has larger customers who also often have an interest in your privacy (the services you are using). And CloudFlare isn't a government granted monopoly, so both their customers and their users have more ability to switch.
You must be one of the lucky few.
To those saying that you are paying your ISP, Cloudflare has customers with much more buying power than you that might want to guarantee this privacy -- and less government granted monopoly power than an isp.
https://git.shivering-isles.com/container-library/dns-over-h...
It's not that complicated to run DoH, one just has to do it.
I trust them about the same.