Hacker News new | ask | show | jobs
by briffle 2458 days ago
That is not true. Several middlemen are now going to not be able to see your data. Most people that used public resolvers were sending plain text UDP queries over their ISP. This could be redirected, hijacked, etc. If you had a connection that wanted you to use their filtering software, they could/would block outgoing port 53. That is not possible with DoH, they can no longer see what domain you are querying. They may be able to block 1.1.1.1, but as more places get DoH, it will be harder to block using other DNS providers.