Hacker News Reader

The article claims that there is some push towards centralized DNS. I do not see the evidence to support this - the only reason Cloudflare is the default in Firefox is that DoH implementations are still rare. PowerDNS is free to implement DoH themselves if they want their customers to be competitive, and so is every ISP.

View on HN

CF was chosen because they signed a contract with Mozilla to reduce the amount of data they collect to the bare minimum.

Can (US) National Security Letters override such contracts?

One nice thing about 'plain' DNS(-over-54; Do53) is that it is distributed in nature, so to get any kind of massive surveillance you have to visit multiple ISPs.

That's not in most people's threat model. If it is in your threat model, you can change the DoH provider to any such service you want. CF with the additional privacy policy is an excellent default choice.

> Can (US) National Security Letters override such contracts?

Yes, and normal, everyday courts can compel companies to siphon their customers' data and keep it secret that they're doing so, despite any claims that the companies make in their privacy policies.

Reply on news.ycombinator.com