undefined | Better HN

0 pointsGekkePrutser5y ago0 comments

But how are those apps finding the DoH server's IP then?

If they use public DoH servers you could just block those at the network level. Andv if they're running their own DoH service on a fixed IP, they could simply run the app itself over that IP and avoid the whole DNS lookup altogether.

0 comments

1 comments · 1 top-level

heavyset_go5y ago

> But how are those apps finding the DoH server's IP then?

I don't know, I haven't dug deep enough to find the answer for myself.

However, after blocking Google's DNS servers on my network and designating my own DNS servers via DHCP, my Chromecast ceased to function, and certain Android apps that serve ads had functionality that ceased to work correctly. That leads me to believe that apps and systems with DoH baked in are actively hostile to mitigations against their DoH implementations.

j / k navigate · click thread line to collapse