Re: [mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy Holidays Everyone!)

2020-07-04 Thread Andy Ringsmuth via mailop

> On Jul 4, 2020, at 2:52 PM, Jay R. Ashworth via mailop  
> wrote:
> 
> - Original Message -
>> From: "Andrew C Aitchison via mailop" 
> 
>> On Tue, 30 Jun 2020, Michael Peddemors via mailop wrote:
>> 
>>> * Stop promoting DNS over HTTPS as a good thing.. ;)
>> 
>> Care to elaborate ?
> 
> Sure.  At it's most fundamental level, giving web browsers a different way to
> do DNS lookups overcomplicates debugging of problems by at least a couple 
> orders of magnitude, even before you multiply it by "trying to get a straight
> answer out of the end user".
> 
> Everything on a machine should use the same OS provided facility for looking
> up DNS.
> 
> Additionally, nearly as I can tell, the aptly named D'oH is solving a problem
> that *users* don't have.  But that's a separate issue.

Not to mention DNS over HTTPS breaks or renders ineffective most types of 
content filtering.


-Andy



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy Holidays Everyone!)

2020-07-04 Thread Jay R. Ashworth via mailop
- Original Message -
> From: "Andrew C Aitchison via mailop" 

> On Tue, 30 Jun 2020, Michael Peddemors via mailop wrote:
> 
>> * Stop promoting DNS over HTTPS as a good thing.. ;)
> 
> Care to elaborate ?

Sure.  At it's most fundamental level, giving web browsers a different way to
do DNS lookups overcomplicates debugging of problems by at least a couple 
orders of magnitude, even before you multiply it by "trying to get a straight
answer out of the end user".

Everything on a machine should use the same OS provided facility for looking
up DNS.

Additionally, nearly as I can tell, the aptly named D'oH is solving a problem
that *users* don't have.  But that's a separate issue.

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth & Associates   http://www.bcp38.info  2000 Land Rover DII
St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647 1274

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop