undefined | Better HN

0 pointsmrmondo7y ago0 comments

Absolutely agree, ideally we’d all be using DNS-over-TLS, however I think but DoH(S) is a ‘good enough’ alternative /if/ you trust the company running the servers.

Google I have essentially no trust in at all anymore (or maybe ever), Cloudflare I trust to a ‘reasonable’ degree; by that I mean I don’t believe they would (at the and leading up to the time of writing this comment) sell identifiable user data from their 1.1.1.1 DNS service and they have a very high technical skill level when it comes to internet security especially with regards to routing and network metadata. However it’s still not ideal or even slightly close to perfect security and while I’d trust Cloudflare over Google in a heartbeat - like anything that could change and better options that are also easy to use may (will likely) pop up.

0 comments

3 comments · 2 top-level

jdietrich7y ago· 1 in thread

1.1.1.1 also supports DNS-over-TLS. DNS-over-HTTPS is clearly an ugly hack, but it's probably a necessary hack for the time being.

https://developers.cloudflare.com/1.1.1.1/dns-over-tls/

mrmondoOP7y ago

Oh I didn’t know that, thanks for the link!

JdeBP7y ago

If we are talking ideals, then ideally we would be using something a lot better than the DNS protocol, which has been hammered out of shape in order to achieve things pretty hard nowadays, and not DNS-over-something at all.

j / k navigate · click thread line to collapse