Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yeah this is likely the #1 reason why it's been implemented by Google. It's sad that this is one of the first Rust features. Proprietary and user hostile.


It doesn't make DNS based ad filtering impossible unless you're doing that at the router level. You can still do it locally (like via hosts file) or via the DNS resolver itself.


As I painfully experienced recently, browsers on desktop ignores host file with DoH enabled. Had to create a separate browser profile to get this to work with DoH and other privacy/security settings to work


Both hosts file and custom DNS resolvers require the device to cooperate.


Yes, based on your other comment it sounds like you're concerned about "smart" devices like TVs that are on the internet. It's unfortunate that those devices lock you out but that's kinda on those devices.


Could also be that other reason, which might be that you're no longer sending every domain you visit in plaintext over the internet...

Not to mention that DNS over HTTP AdBlock is basically just as easy to set up nowadays.


> Not to mention that DNS over HTTP AdBlock is basically just as easy to set up nowadays.

Only if the device in question uses the ad-blocking DNS servers.

Firefox (IIRC) by default does not use the operating system's resolv.conf. Smart TVs (and Chromecast) have also been known to ignore DNS settings from DHCP.

* https://labzilla.io/blog/force-dns-pihole

And since the DNS traffic now looks like HTTP(S) traffic, your only recourse is to block all HTTP access and tunnel it through a proxy.

As an IT guy, and the person who runs a home network, this reduces the visibility of what is happening on my network(s). Reduced visibility is bad IMHO.


You can force Firefox to use use a DNS server of your choosing with a canary domain: https://support.mozilla.org/en-US/kb/canary-domain-use-appli...


I'd prefer it Firefox was opt-in instead of opt-out, and if they'd just use the OS settings like every other piece of code on my system.


You will still do so with SNI.


Yeah and if you don't use SNI, but the website sits on its own IP, then the website can be found out via the ip, which is transmitted in the clear (unless VPNs/tunneling etc are used).


If it's user hostile, isn't that against the Rust code of conduct? Can't Google's license to use Rust be revoked in that case?


No




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: