Chrome 78 to experiment with DNS-over-HTTPS

Forum Moderators: open

Message Too Old, No Replies

Chrome 78 to experiment with DNS-over-HTTPS

tangor

4:19 pm on Sep 11, 2019 (gmt 0)

Only days after Mozilla said it plans to make DNS-over-HTTPS (DoH) available by default gradually for Firefox users in the US, Google announced its intention to test DoH in Chrome 78, due for beta release in the next two weeks.

DoH wraps domain-name queries in a secure, encrypted HTTPS connection to a DNS server, rather than firing off requests using bog-standard plain-text insecure DNS, thereby keeping queries inaccessible to eavesdroppers. It's one of several emerging internet protocols intended to close security and privacy gaps in online communications.

[theregister.co.uk...]

We all agree that securing the web is a priority ... FireFox and Chrome are taking steps ... but at what cost?

martinibuster

7:24 pm on Sep 11, 2019 (gmt 0)

...but at what cost?

I'm not sure what cost you are referring to.

Are you talking about the dark web?

tangor

8:55 pm on Sep 11, 2019 (gmt 0)

Where it began? Or intervening in paths? Or making Cloudflare (or a batch of 5-6 others hand-picked) the pivot? Or ...

In the quest to secure the web, it looks like some intentional breakage is being used.

This is a redirect ... and we already know that redirects can have problems.

That said, this is something new for me and maybe I missed the memo ... explain to me why this is a "good thing" ... meanwhile, will do a bit more research on this thing MOZ rolled out first and Chrome is so eager to one up in two weeks ...

What about the non-https sites? Probably missing something here (reason why I posted the report) and looking for illumination.

topr8

10:19 pm on Sep 11, 2019 (gmt 0)

What about the non-https sites?

@tangor DNS lookups have no connection to if a site is http or https