Re: [Add] [EXTERNAL] Re: Malware adopting DoH

["Robert Mortimer" <[e-mail]>]

No that's an argument for making an informed decision about what DNS service provider you use and possibly for being able to avoid limitations being imposed by the network you happen to be using at the time.

Using a VPN to access your DNS provider would achieve the same thing, as would using DoT or in many cases simply not using DHCP to decide your DNS provider.

If my an application is deciding which DNS service to use without my informed consent then even if it's using DoH it achieves none of the things you list.

Your list merely describes informed choice of DNS provider not any benefit uniquely inherent to DoH


-- 
Robm
873
  "Ask not what I can do for the stupid, 
         but what the stupid can do for me" - Graeme Garden
On 14/09/2019 17:16:14, Ted Lemon <[e-mail]> wrote:
On Sep 14, 2019, at 5:16 AM, Robert Mortimer <robm=[e-mail] [mailto:robm=[e-mail]]> wrote:
If google or any other TRR DoH provider start blocking malware by default surely that is filtering DNS which is the very problem that DoH is claiming to be solving?

The argument for DoH is that you can 
* reliably know who operates the resolver you are talking to
* know what the terms of service are
* choose your provider based on their terms of service
* not be forced to accept whatever terms service provider through which you are connecting at the moment insists upon, possibly with out telling you