this post was submitted on 03 Oct 2023
635 points (98.9% liked)

Firefox

17302 readers
458 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago
MODERATORS
[email protected]
635
Say (an encrypted) hello to a more private internet. (blog.mozilla.org)
submitted 10 months ago by [email protected] to c/[email protected]
62 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 5 points 10 months ago

Ordinary DNS requests are always plaintext and readable to anyone between you and the DNS server.

Not just readable... The ISP can inject their own responses too. Regular DNS is both unencrypted and unauthenticated, with most clients not enforcing DNSSEC.