Hacker News new | ask | show | jobs
by deathanatos 2538 days ago
And how does DoH prevent that?

I would presume that, like with DNS over DNS¹, a resolver could check /etc/hosts first prior to attempting to resolve over the network; do proposed DoH resolvers not do that?

Worse comes to worse, you could always run your own local resolver.

¹or whatever we're calling the original protocol now

1 comments

DoH bypasses the normal resolver, and gives control over resolution to the browser. Not a big deal if your browser is from Mozilla. A little more concerning if your browser is from google.
That's how it's done now, because browsers want to push the tech when nobody else has yet bothered; but it would make a lot more sense in the long term for DNS to stay an OS-level concern, so I would expect DoH to be implemented by the OS DNS resolvers.
DoH is just a protocol. Your appliance/application could choose to bypass the network specified resolver whether or not it uses DoH.