Hacker News Reader

Frequently these ISP level blocks also redirect the normal port 53 traffic to their own servers so these settings are meaningless. What does work is DNS-over-HTTPS which can be enabled quickly and easily in both Chrome and Firefox and will side-step this block even against adversarial ISPs.

View on HN

"Frequently these ISP level blocks also redirect the normal port 53 traffic to their own servers"

No ISP is going to do nonsense like that for something like copywrite related compliance unless lots of money is forthcoming. An ISP can NXDOMAIN on their own DNS servers at a minimal cost. Doing 53/udp fiddling for all customers means CAM or similar expensive resource usage.

If you do find that your DNS is being redirected as TrueDuality describes, then yes DoH is an option. However if this is an issue then you have far bigger problems than not being able to access Anna's Archive.

I wonder if an ISP could just serve NXDOMAIN for the canary domain? [0]

[0] https://support.mozilla.org/en-US/kb/canary-domain-use-appli...

Reply on news.ycombinator.com