Re: [Doh] [Ext] panel discussion on DoH/DoC

[Adam Roach <[e-mail]>]

On 2/7/19 10:06 AM, Paul Hoffman wrote:
> On Feb 7, 2019, at 7:46 AM, Adam Roach <[e-mail]> wrote:
>> On 2/7/19 9:36 AM, Paul Hoffman wrote:
>>>> although not the use case that subsequently emerged, where browsers do it instead of using the local resolver.
>>> A browser vendor (Mozilla) does use a cloud provider as their default DoH server. That browser vendor has not explained why.
>>
>> The claim that Firefox has a cloud provider as its default DoH server isn't wrong on its face, but the implication that Firefox uses DoH by default is.
> Sorry, I certainly didn't mean to imply that. The dialog where you can turn on DoH is completely clear that it is off by default.
>
>> The claim that Mozilla has not explained why, however, is flatly false. There's been a lot of electronic ink spilled on the topic; including, notably: https://blog.nightly.mozilla.org/2018/06/01/improving-dns-privacy-in-firefox/
> We disagree that that article from six months ago explains why Cloudflare is still the default provider.


I thought the following text in the article I cited was pretty clear: 
"We’ve chosen Cloudflare because they agreed to a very strong privacy 
agreement 
<https://developers.cloudflare.com/1.1.1.1/commitment-to-privacy/privacy-policy/firefox/> 
that protects your data."

If you want a little more meat on that statement, I'll clarify that the 
agreement here isn't just some informal "put these words up on a 
webpage" kid of thing. There's a formal legal agreement in place between 
Mozilla and Cloudflare that ensures that Cloudflare is handling DoH 
queries with the standards of privacy that Mozilla demands as part of 
its core mission.

/a