Hacker News Reader

Comment by kernal | Hacker News Reader

> Without ublock origin, the internet is simply unbearable

Oh please. Change your DNS to AdGuard or NextDNS and job done.

I’ll route this to my grandma and my gen Z relatives who never touched anything outside of an iPhone, thank you for your very insightful comment.

https://mullvad.net/en/help/dns-over-https-and-dns-over-tls#...

Not exactly the simplest instructions, to your point, but you can still just do it once for them or get on a call and walk them through it. They might even notice that websites load faster when they don't make dozens of requests to advertisers and trackers.

Simple DNS blocking has been insufficient for some time thanks to cnames. They also can't block first party ads.

uBlock origin is so much better than just DNS-level blocking can ever be

AdGuard also has a browser extension for blocking inline ads. The combo of AdGuard extension + DNS blocking is good enough that I haven't missed uBlock Origin

Does that work with DoH (DNS over HTTP)? It's my understanding that using systems like AdGuard or NextDNS or even PiHole fail to handle DoH requests. In that case the only solution is something like uBlock Origin.

It’s just a dns server, they use DoH themselves.

If you are trying to intercept dns traffic that ignores your dns setting that’s a separate issue.

https://help.nextdns.io/t/x2hmvas/what-is-dns-over-tls-dot-d...

> NextDNS supports all 4 protocols. See the setup tab for more information on how to use them.

ISPs make it difficult or impossible if you're using their router.

What? You can set a DNS server on every OS and device. It works for Windows, Linux, iOS and Android.

But that’s really only viable if you have a very small number of devices and those devices only have one user. Let’s say you have a family of 4, each with smart phones, two tablets, three computers, each with myltiple user accounts… setting DNS on each individually becomes extremely cumbersome. Not to mention all the other connected devices that want to throw ads at you these days, TVs gaming systems, etc. And god help you if you’ve invested in any kind of crazy connected thing like a fridge with a screen on it, setting device level DNS there might be so obfuscated t’s not possible.

Point is that using any kind of DNS based blocking is far better at the router level but the above poster is right in that a lot of ISPs these days make it impossible to adjust your router level DNS and even for someone tech minded setting up some kind of downstream secondary router can be become so convoluted that they just give up.

Fair enough.

Reply on news.ycombinator.com