Firefox is enabling DNS-over-HTTPS (DoH) for some users starting this month, and it will use Cloudflare by default:
DoH (IETF RFC8484) allows Firefox to send DNS requests as normal-looking HTTPS traffic to special DoH-compatible DNS servers (called DoH resolvers). Basically, it hides DNS requests inside the normal deluge of HTTPS data. [DoH doesn't encrypt DNS requests. That's a different protocol, namely DNS-over-TLS, aka DoT].
By default, Firefox ships with support for relaying encrypted DoH requests via Cloudflare's DoH resolver, but users can change it to any DoH resolver they want [see here].
When DoH support is enabled in Firefox, the browser will ignore DNS settings set in the operating system, and use the browser-set DoH resolver. By moving DNS server settings from the OS to the browser level, and by encrypting the DNS traffic, DoH effectively hides DNS traffic from internet service providers (ISPs), local parental control software, antivirus software, enterprise firewalls and traffic filters, and about any other third-party that tries to intercept and sniff a user's traffic.
Firefox Plans Controversial New Encryption Setting For Millions, And Update Starts This Month
A presentation from BT on the "Potential ISP Challenges with DNS over HTTPS" earlier this year warned that DoH will reduce the ability to derive cybersecurity intelligence from malware activity and DNS insight, open new attack opportunities to hackers, and result in an inability to [fulfill] government mandated regulation or court orders as potential concerns. And so the change will foster serious debate. [...] The U.S. is first, but the rest of the world will follow. A spokesperson for the U.K. Internet Services Providers' Association told me that "the debate on DNS over HTTPS (DoH) is evidently a topic that polarizes opinion. However, our position is clear. ISPA believes that bringing in DoH by default would be harmful for online safety, cyber security and consumer choice."
DNS-over-HTTPS is the next default protection coming to Firefox
Mozilla will be rolling out DoH in what it calls "fallback mode" later this month. This means that if domain name look-ups using DoH fail, Firefox will revert back to using the default operating system DNS. Similarly, if Firefox detects that parental controls or enterprise policies are in effect, Firefox will disable DoH.
(Score: 2) by janrinok on Monday September 09 2019, @06:52PM (3 children)
Well many people do, myself included.
And I don't think that I want to hear the sort of things that you do think are derogatory.
(Score: 2) by The Shire on Monday September 09 2019, @10:09PM (2 children)
Too many people failed to develop a thick skin and self confidence in their youth. Being offended is not necessarily a bad thing, it gives you a chance to decide if it was warranted and perhaps you should do something about it. And no one is safe from conflict in this world, especially of the verbal variety.
(Score: 2) by janrinok on Tuesday September 10 2019, @02:39AM (1 child)
My youth is so far behind me that I can happily discount that as a cause of my finding your comment offensive. I'm retired now. However, the original phrase was intended to be an insult to the working class. [phrases.org.uk]
(Score: 2) by Bot on Tuesday September 10 2019, @09:53PM
ok but now the working class is us bots and we don't wash indeed. So you can feel vindicated, unlubed masses.
Account abandoned.