12-14-2019, 09:35 AM
(11-11-2019, 03:34 PM)fChk Wrote: (...)
>> A little personal note on this:
I recently changed my ISP to an "underdog" company which happens to have a good 4G-LTE coverage in the different areas where I need it. But to my dismay, I've found that they are filtering out port 53 in such a way that any DNS query to any external nameserver (except theirs of course) is blocked!!!..
I'm aware that there are 2/3 ways to circumvent this, using a VPN, SSH-tunneling, port-forwarding... and DNS-over-HTTPS.
But When I learned about Firefox shipping DoH, I immediately enabled it thus improving the latency/performance (my new ISP DNS server is really that crappy), the Web browsing privacy ISP-wise (letting Cloudflare build that profile instead, for now. )
(...)
I've always been wary of the industrial-scale of users tracking going on on the Internet in general, and the Web in particular. It's simply consternating. Any time privacy-advocates fight back, they are faced by a barrage of corporate harassment if not by legal suits.
I still remember the fight over the end-to-end encryption that took place few years ago between US security agencies and the BigTech industries supported by the ACLU (American Civil Liberties Union.) Reasonably strong TLS encryption made its way to the web, and was widely promoted by Google to get lazy web masters to implement it on their web sites to the point that nowadays plain text web sites are in the minority, where it matters.
These days, it seems, the fight is still on... The good news is that we are winning the technology side of it (I'll write on this point on another thread...) For the political side, things are still shaky. I've had this thought when I was reading this article from @arstechnica: ISPs lobby against DNS encryption, but Mozilla tells Congress not to trust them.
It would seem that the ISPs don't like DoH, at all (who's surprised?)... This is the famous 'Going Dark' in it's 2.0 iteration.