public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
From: "Peter Müller" <peter.mueller@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: Should we block DoH by default?
Date: Tue, 03 Mar 2020 15:28:00 +0000	[thread overview]
Message-ID: <b2db2fb4-bc45-e84f-c373-133888dc223d@ipfire.org> (raw)
In-Reply-To: <83D08EF2-A2BC-4759-9F69-E42BADBDA3C9@ipfire.org>

[-- Attachment #1: Type: text/plain, Size: 1117 bytes --]

Hello *,

@Sorin-Mihai Vârgolici: EHLO, it's nice to see another Postmaster on this list... :-)

although I basically agree with Michael, Tapani made a point: If we decide to build
something that intents to block DoH in Firefox (what about other browsers, anyway?),
the administrator of an IPFire machine should be able to turn it off easily - which
would be something different than the "turn DNSSEC off" switch requested countless
times by now.

Needless to say, if Mozilla decides not to honour use-application-dns[.]net anymore
- which I expect to happen as some ISPs probably want to continue snooping on their
users DNS traffic -, we are at the very beginning of this battle again.

Besides this canary domain, the links mentioned in https://lists.ipfire.org/pipermail/development/2020-March/007134.html
might be helpful, too, but that would require some sort of deep package inspection,
which I advise against.

It seems to me like the internet is getting worse all the time, and unfortunately,
DoH as used by Mozilla does not make it better...

Thanks, and best regards,
Peter Müller

      parent reply	other threads:[~2020-03-03 15:28 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-03-03 11:47 Michael Tremer
2020-03-03 12:55 ` Aw: " Bernhard Bitsch
2020-03-03 13:15 ` Tapani Tarvainen
2020-03-03 13:58   ` Aw: " Bernhard Bitsch
2020-03-03 15:55     ` Tapani Tarvainen
2020-03-03 15:59       ` Arne Fitzenreiter
2020-03-03 16:06       ` Aw: Re: " Bernhard Bitsch
2020-03-03 17:18         ` Michael Tremer
2020-03-03 18:32           ` Peter Müller
2020-03-04  6:00             ` Tapani Tarvainen
2020-03-04 10:11               ` Michael Tremer
2020-03-04 10:56                 ` Tapani Tarvainen
2020-03-04 10:58                   ` Michael Tremer
2020-03-04  5:53           ` Tapani Tarvainen
2020-03-03 16:06       ` Arne Fitzenreiter
2020-03-03 14:09 ` Sorin-Mihai Vârgolici
2020-03-03 15:28 ` Peter Müller [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=b2db2fb4-bc45-e84f-c373-133888dc223d@ipfire.org \
    --to=peter.mueller@ipfire.org \
    --cc=development@lists.ipfire.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox