this post was submitted on 04 Oct 2023
15 points (100.0% liked)

Privacy Guides

16763 readers
3 users here now

In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.

This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.


You can subscribe to this community from any Kbin or Lemmy instance:

Learn more...


Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!

Want to get involved? The website is open-source on GitHub, and your help would be appreciated!


This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.


Moderation Rules:

  1. We prefer posting about open-source software whenever possible.
  2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
  3. No soliciting engagement: Don't ask for upvotes, follows, etc.
  4. Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
  5. Be civil, no violence, hate speech. Assume people here are posting in good faith.
  6. Don't repost topics which have already been covered here.
  7. News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
  8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
  9. No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
  10. No misinformation: Extraordinary claims must be matched with evidence.
  11. Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
  12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.

Additional Resources:

founded 1 year ago
MODERATORS
 

Quick question about DNS and DoH that I thought about after reading this post:

https://packmates.org/@silvereagle@furry.engineer/111176886781705659

Wouldn't it make sense for Firefox or another third party to bundle and transparently forward all DoH requests to cloudflare so that:

A) Cloudflare doesn't know who made what request due to not knowing the origin

B) Firefox doesn't know who made what request due to TLS

#Infosec #Privacy
CC: @privacyguides

top 12 comments
sorted by: hot top controversial new old
[–] farcaller@fstab.sh 4 points 1 year ago

That's somewhat similar to how apple private relay works.

[–] FeelzGoodMan420@eviltoast.org 4 points 1 year ago (1 children)

Just an fyi. DoH is a fucking nightmare for network management. For example, if you use a pihole on your network, you 100% do NOT want devices using encrypted DNS.

[–] AzzyDev@beehaw.org 1 points 1 year ago (1 children)

Is it possible for devices to ask the pihole without doh, and the pi-hole to forward the request with doh if the domain isn’t in the cache?

[–] FeelzGoodMan420@eviltoast.org 1 points 1 year ago

I'm not an expert but I'm pretty sure no.

[–] phanto@lemmy.ca 2 points 1 year ago (1 children)

I have a mini PC that is always on that runs my NTP and DNS, and it's upstream DNS is quad nine out of Switzerland. (9.9.9.9). I tend toward the same usage patterns daily, and about a third of my requests never leave my home DNS to get resolved.

[–] peregus@lemmy.world 1 points 1 year ago (1 children)

The TTL nowadays is about 3600 seconds, so I think that at about that rate your DNS server would flush stored entries every hour one by one and ask to 9.9.9.9 an update. That's basically how every DNS server works (and I guess that even the ones embedded in router's works like that with caching). Is your setup different? If yes, in which way? Thanks

[–] phanto@lemmy.ca 1 points 1 year ago

I set it up a long time ago, so I don't honestly remember. I followed some guide, and did a few domain redirects to point at stuff on my home network and to shut Zuck out of my life, but I didn't do anything crazy. So, I doubt it, but I don't know.

[–] netchami@sh.itjust.works 1 points 1 year ago* (last edited 1 year ago) (1 children)

Not using Cloudflare as a DNS resolver would be an even better solution.

[–] toxicyeti@sh.itjust.works 1 points 1 year ago (1 children)

I’ve just started using their Zero trust stuff and so far I like it. Why should I not use them? What other options are better?

[–] netchami@sh.itjust.works 4 points 1 year ago (1 children)

I meant Cloudflare DNS, I don't understand why Firefox uses Cloudflare DNS when there are so many other great options like NextDNS. The reason why many people in the privacy community dislike Cloudflare or CDNs in general is because they are often hostile to VPN or TOR users, and they centralize the web.

[–] toxicyeti@sh.itjust.works 1 points 1 year ago

Ah got it, that makes sense. Thanks.

[–] jornane@ipv6.social 1 points 1 year ago

@Wander @privacyguides I think that’s what ODoH is. Apple also does something like that with their private relay service.

However, it still allows the last DNS provider in the chain to see all queries, even if they don’t know the exact source.