Firefox

17302 readers

874 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago

MODERATORS

[email protected]

635

Say (an encrypted) hello to a more private internet. (blog.mozilla.org)

submitted 10 months ago by [email protected] to c/[email protected]

62 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 8 points 10 months ago (1 children)

What if you force a dns, like say cloudflare?

[–] [email protected] 8 points 10 months ago (3 children)

Ordinary DNS requests are always plaintext and readable to anyone between you and the DNS server. So regardless of which DNS server you use, your ISP can see all your DNS lookups. For any amount of privacy for DNS, the minimum is something like DNS-over-TLS or DNS-over-HTTPS, the latter of which Firefox uses by default in some countries and supports everywhere.

[–] [email protected] 6 points 10 months ago (1 children)

I mean with this + DNS over HTTPS can we guarantee the isp can no longer see anything?

[–] [email protected] 2 points 10 months ago

They'll only see the IP you're connecting with and encrypted data packets being transferred on.

[–] [email protected] 5 points 10 months ago

Ordinary DNS requests are always plaintext and readable to anyone between you and the DNS server.

Not just readable... The ISP can inject their own responses too. Regular DNS is both unencrypted and unauthenticated, with most clients not enforcing DNSSEC.

[–] [email protected] 3 points 10 months ago (2 children)

so you're saying self host an authoritative DNS server

[–] [email protected] 4 points 10 months ago

It's easy to setup something like AdGuard Home that provides malware blocking, ad blocking if you're interested in that, and supports DNS-over-HTTPS out of the box (unlike PiHole, which needs a bunch of manual setup)