ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Why big ISPs aren’t happy about Google’s plans for encrypted DNS

    Scheduled Pinned Locked Moved News
    ispfccdnsgoogledns over https
    41 Posts 13 Posters 5.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller
      last edited by

      Add a PiHole to hide a lot of your DNS activity. Not all, by any means, but it greatly reduces it.

      DustinB3403D JaredBuschJ 2 Replies Last reply Reply Quote 0
      • DustinB3403D
        DustinB3403 @scottalanmiller
        last edited by

        @scottalanmiller said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

        Add a PiHole to hide a lot of your DNS activity. Not all, by any means, but it greatly reduces it.

        I have PiHole setup at my residence and funnily enough there are a lot of things that are free like (PBS streaming) which isn't available because they are required to have access to your info. . .

        scottalanmillerS 1 Reply Last reply Reply Quote 0
        • scottalanmillerS
          scottalanmiller @DustinB3403
          last edited by

          @DustinB3403 said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

          @scottalanmiller said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

          Add a PiHole to hide a lot of your DNS activity. Not all, by any means, but it greatly reduces it.

          I have PiHole setup at my residence and funnily enough there are a lot of things that are free like (PBS streaming) which isn't available because they are required to have access to your info. . .

          Weird. I've not seen any of those yet, but wow.

          DustinB3403D 1 Reply Last reply Reply Quote 0
          • DustinB3403D
            DustinB3403 @scottalanmiller
            last edited by

            @scottalanmiller Yeah the services depend on doubleclick etc, so if you have those blocked, then you're SOL for using those streaming services. I was kind of pissed about it. .

            dbeatoD 1 Reply Last reply Reply Quote 0
            • JaredBuschJ
              JaredBusch @scottalanmiller
              last edited by JaredBusch

              @scottalanmiller said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

              Add a PiHole to hide a lot of your DNS activity. Not all, by any means, but it greatly reduces it.

              This does nothing to hide it. It only centralizes the "device" requesting the DNS.

              Edit: And if you host it externally, then your ISP still sees your DNS.

              scottalanmillerS 2 Replies Last reply Reply Quote 0
              • scottalanmillerS
                scottalanmiller @JaredBusch
                last edited by

                @JaredBusch said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

                @scottalanmiller said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

                Add a PiHole to hide a lot of your DNS activity. Not all, by any means, but it greatly reduces it.

                This does nothing to hide it. It only centralizes the "device" requesting the DNS.

                Edit: And if you host it externally, then your ISP still sees your DNS.

                And caches, so it only knows that something has been looked up, but not how often.

                1 Reply Last reply Reply Quote 0
                • scottalanmillerS
                  scottalanmiller @JaredBusch
                  last edited by

                  @JaredBusch said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

                  Edit: And if you host it externally, then your ISP still sees your DNS.

                  Good point. Hides it from one place, but exposes to another.

                  1 Reply Last reply Reply Quote 0
                  • scottalanmillerS
                    scottalanmiller
                    last edited by

                    PiHole can do DNS over HTTPS if you configure it (for its own lookups, not your lookups to it.)

                    https://docs.pi-hole.net/guides/dns-over-https/

                    JaredBuschJ 1 Reply Last reply Reply Quote 0
                    • JaredBuschJ
                      JaredBusch @scottalanmiller
                      last edited by

                      @scottalanmiller said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

                      PiHole can do DNS over HTTPS if you configure it (for its own lookups, not your lookups to it.)

                      https://docs.pi-hole.net/guides/dns-over-https/

                      Not a default setting in the GUI last tie I looked. /looks at link, yup not a default thing yet.

                      Good to exist, but until it is native, adoption will be low.

                      1 Reply Last reply Reply Quote 2
                      • scottalanmillerS
                        scottalanmiller
                        last edited by

                        It's still a nascent tech.

                        1 Reply Last reply Reply Quote 0
                        • ObsolesceO
                          Obsolesce
                          last edited by

                          Why not set this up to make all of your dns queries

                          Screenshot_20191001-160203_Google Play Store.jpg

                          scottalanmillerS 2 Replies Last reply Reply Quote -1
                          • scottalanmillerS
                            scottalanmiller @Obsolesce
                            last edited by

                            @Obsolesce how does that help when I do 99% of my lookups from a desktop?

                            ObsolesceO 1 Reply Last reply Reply Quote 0
                            • scottalanmillerS
                              scottalanmiller @Obsolesce
                              last edited by

                              @Obsolesce if I did that, it would bypass my PiHole and put all kinds of crap back into my pages on my phone slowing it down. That would suck.

                              JaredBuschJ PhlipElderP 2 Replies Last reply Reply Quote 0
                              • JaredBuschJ
                                JaredBusch @scottalanmiller
                                last edited by JaredBusch

                                @scottalanmiller said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

                                @Obsolesce if I did that, it would bypass my PiHole and put all kinds of crap back into my pages on my phone slowing it down. That would suck.

                                It is at least a simple DNS privacy option when you are not at home. But I found it mostly useless.

                                1 Reply Last reply Reply Quote 0
                                • dbeatoD
                                  dbeato @DustinB3403
                                  last edited by

                                  @DustinB3403 said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

                                  @scottalanmiller Yeah the services depend on doubleclick etc, so if you have those blocked, then you're SOL for using those streaming services. I was kind of pissed about it. .

                                  Yup, CBS does this as well.

                                  1 Reply Last reply Reply Quote 0
                                  • PhlipElderP
                                    PhlipElder @scottalanmiller
                                    last edited by

                                    @scottalanmiller said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

                                    @Obsolesce if I did that, it would bypass my PiHole and put all kinds of crap back into my pages on my phone slowing it down. That would suck.

                                    All of our edge devices are set to block DNS queries from anywhere but the local DNS server. So, no avoiding it.

                                    1 Reply Last reply Reply Quote 0
                                    • PhlipElderP
                                      PhlipElder
                                      last edited by

                                      Ugh: https://support.umbrella.com/hc/en-us/articles/360001371526-Web-Browsers-and-DNS-over-HTTPS-default

                                      Cisco/Umbrella/OpenDNS instructions to block DoH. 😛

                                      scottalanmillerS 1 Reply Last reply Reply Quote 0
                                      • scottalanmillerS
                                        scottalanmiller @PhlipElder
                                        last edited by

                                        @PhlipElder said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

                                        Cisco/Umbrella/OpenDNS instructions to block DoH.

                                        Well it involves security and Cisco doesn't like security.

                                        1 Reply Last reply Reply Quote 0
                                        • IRJI
                                          IRJ
                                          last edited by

                                          So I am thinking this makes search engine data much more valuable when your ISP isnt able to sell your information as easily.

                                          J scottalanmillerS 2 Replies Last reply Reply Quote -1
                                          • J
                                            JasGot @IRJ
                                            last edited by

                                            @IRJ said in Why big ISPs aren’t happy about Google’s plans for encrypted DNS:

                                            this makes search engine data much more valuable

                                            Follow the money, right? Good catch!

                                            IRJI 1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 1 / 3
                                            • First post
                                              Last post