<story><title>Firefox DNS-over-HTTPS</title><url>https://support.mozilla.org/en-US/kb/firefox-dns-over-https</url></story><parent_chain><item><author>Animats</author><text>&lt;i&gt;Firefox by default directs DoH queries to DNS servers that are operated by a &amp;quot;trusted partner&amp;quot;.&lt;/i&gt;&lt;p&gt;That&amp;#x27;s what I don&amp;#x27;t want - Firefox offering services.&lt;p&gt;Once you have a centralized server, with a huge number of minor queries passing through it, the operators get uppity. They start thinking they have editorial authority. Someone will decide that the DNS server should censor something. Child porn is the usual excuse, and then, after a while, you can&amp;#x27;t see sites that mention Tienanmen Square or Ukraine any more.&lt;p&gt;I&amp;#x27;m quite happy with Sonic&amp;#x27;s classic DNS server. It just answers DNS queries and forwards requests to the appropriate upstream DNS server as required.</text></item></parent_chain><comment><author>hiq</author><text>This is configurable though (it&amp;#x27;s only a default), and is still better than the status quo in a lot of areas. Either you care enough to change it, or you stick to the default. Default (ISP) plain DNS is worse.</text></comment>
<story><title>Firefox DNS-over-HTTPS</title><url>https://support.mozilla.org/en-US/kb/firefox-dns-over-https</url></story><parent_chain><item><author>Animats</author><text>&lt;i&gt;Firefox by default directs DoH queries to DNS servers that are operated by a &amp;quot;trusted partner&amp;quot;.&lt;/i&gt;&lt;p&gt;That&amp;#x27;s what I don&amp;#x27;t want - Firefox offering services.&lt;p&gt;Once you have a centralized server, with a huge number of minor queries passing through it, the operators get uppity. They start thinking they have editorial authority. Someone will decide that the DNS server should censor something. Child porn is the usual excuse, and then, after a while, you can&amp;#x27;t see sites that mention Tienanmen Square or Ukraine any more.&lt;p&gt;I&amp;#x27;m quite happy with Sonic&amp;#x27;s classic DNS server. It just answers DNS queries and forwards requests to the appropriate upstream DNS server as required.</text></item></parent_chain><comment><author>contingencies</author><text>I live in China and (still) use Firefox in preference to Google. I agree they need to fire the management and focus on the code. The big pain with DNS is that it&amp;#x27;s one avenue of censorship but also a proxy for many wrong-headed network geographic assumptions through the lens of geoDNS. &lt;i&gt;&amp;quot;Oh, you resolved from Europe, so you really want a European server! Let me help you out there...&amp;quot;&lt;/i&gt; The internet has far too many of these half-baked hacks layered now, it&amp;#x27;s getting to the point where to obtain a halfway trustworthy response you have to have a dynamic network of geographically distributed and temporally transient nodes seeking similar information and voting on the result. Geoscoping, echo-chamber personalization, household profiling, jurisdiction-second-guessing, ID verification as an outsourced service, political policy fandangling, globe splitting for artificial market segregation, walled-gardening, DRM...</text></comment>