Remix.run Logo
dev_l1x_be 3 hours ago

I never understood DOH over DOT. It makes sense if you want to hide DNS lookups so that people cannot block the DNS queries to ad and other scam networks.

wongogue 2 hours ago | parent | next [-]

My ISP (my area is serviced by 1 more but they offer lower speeds) blocks the DoT port. They cannot block 443. If they start blocking popular DoH domains, I can use any of the mirrors or run my own over https://wongogue.in/catpics/

the8472 an hour ago | parent [-]

Anything that doesn't provide raw access at the internet protocol layer (other than RFP to prevent spoofing) shouldn't qualify as internet provider.

itopaloglu83 2 hours ago | parent | prev | next [-]

DOH prevents malicious network providers from blocking DOT traffic to enforce their own DNS services for “efficiency” reasons.

Most ISPs just want to sell your data and with encrypted client hello and DOH they’re losing visibility into what you’re doing.

zamadatix 2 hours ago | parent | prev | next [-]

DOT picked an odd port, DOH uses 443. Otherwise they both have the benefits of TLS.

zokier an hour ago | parent | prev | next [-]

DoQ is better than either dot/doh

junon 2 hours ago | parent | prev [-]

It's both. In oppressive countries (Iran, China, Russia) where all traffic is filtered, DOH is supposed to help keep things concealed, too.