[imglorp]

How would a web browser know which DNS it's using?

You set your DNS preference to point to the PI-hole and it should behave like any other DNS server. I guess it could attempt to resolve some spam domain like doubleclick.net and if it was incorrect it could complain...

[Nux]

There is a clear and definite trend of taking DNS out of the user's control, see all the hype with DNS over HTTPS etc etc.

Firefox is working on using DoH (opt-in at the beginning, but who knows) from "select" providers. Chrome has a similar switch, surely. Same with Android 9, opt-in DoH, but maybe it'll become opt-out or no-opt in the future.

In the name of privacy and security of course, but with the totally unintended side effect of users unable to dodge ads via DNS/hosts. Interesting, no?

[ktm5j]

The argument you are making is a huge stretch.. Cloudflare is one of the bigger driving forces for DoH and they have nothing to do with ad revenue. Claiming that DoH is some sneaky way to get rid of things like pi-hole is just ridiculous.

[Nux]

DoH in itself is not sneaky, no more than ping is. The push to centralise DNS resolution in the hands of a few questionable actors is and this is what is happening.

Cloudflare for example would absolutely love to know what you're up to all day; and because they can now correlate data from their "omnipresent" WAF with the data from 1.1.1.1 they could get some interesting information... And believe you me, they're not sending it to /dev/null.

[kasey_junk]

Cloudflare makes a pretty specific statement against what you are saying:

"1.1.1.1 does not mine any user data. Logs are kept for 24 hours for debugging purposes, then they are purged."

Are you claiming they are lying?

[craigsmansion]

I'm all for assuming the people who work there are good eggs with the best intentions, but Cloudflare, Inc. is a U.S. company. As I understand the U.S. legal landscape with regards to data and privacy protection, they could be forced to lie at a moment's notice and not talk about it.

[kasey_junk]

So far as I know there is no legal way for the US to make a company lie about its activities. That is the basis of warrant canaries, which have not been tested in court yet. You can find cloudflares https://www.cloudflare.com/transparency/.

They could be forced to not talk about something via a gag order.

[TrinaryWorksToo]

I'm not claiming their lying or doing anything internally that is different. There is just nothing stopping the change from happening, now that the possibility exists

[Nux]

I'm claiming I don't believe them. They could write on their page whatever they see fit and do a completely different thing internally.

[wang_li]

> There is a clear and definite trend of taking DNS out of the user's control, see all the hype with DNS over HTTPS etc etc.

It seems absurd that these companies are blurring the line between software and malware.

Software vendors are going to have to start paying for the bandwidth they use on networks against the will of the network operator.

[e-moe]

some of their products already have hardcoded Google DNS. see

https://www.reddit.com/r/googlehome/comments/8917ci/google_h...

[NetBeck]

They could force Chrome to use Google's DNS over HTTPS.

[pricecomstock]

Sure, but what's to stop any application from choosing some other DNS to use?

There was a bit of controversy about FireFox doing exactly that. https://yro.slashdot.org/story/18/08/05/2353249/security-res...

[voidmain0001]

While you're at it, add Blokada to your Android device and it too will eliminate the need for uBlock Origin or Ghostery in Chrome on Android since it's operating outside of the browser's sandbox. Or use Firefox on Android and continue using the ad block plugins it provides. Hopefully Firefox doesn't go away anytime soon...

[dbg31415]

https://www.xda-developers.com/fix-dns-ad-blocker-chrome/