points by bombcar 1 day ago | 0 comments
It is super annoying especially since it's not even "browser has its own DNS and cache but uses your name servers" - more and more "browser bypasses all your shit both on the OS and the network and uses DNS over HTTPS to do God knows what".
[–] xp84 1 day ago
[–] ToucanLoucan 1 day ago
Edit: Found it, February 2020: https://blog.mozilla.org/en/firefox/firefox-continues-push-t...
[–] pelican0 1 day ago
Out of curiosity, what are some of those things it messed up for you? And what kinds of builds is it affecting?
[–] ToucanLoucan 1 day ago
And like, I don't need that. My DNS server is properly maintained and queries those exact same servers itself when you request something like google.com or apple.com. Putting a separate friggin DNS query AND cache in a browser is just more trying to protect people from themselves IMO, and introduces this weird issue where you can't hit an internal site in Firefox, even though you're running `nslookup` on your freaking computer, and it's giving you the proper IP address. And paradoxically putting the IP address in makes the browser find it when the domain you can see correctly resolving in terminal isn't resolving in the browser is fucking obnoxious.
It also would render a pihole useless because Firefox despite the PC's DNS not resolving ad provider's names, WILL resolve them, ensuring an attack vector for malware remains wide open even if you've tried to close it.
And while I'm bitching about this: STOP DEFAULTING EVERY CONNECTION TO HTTPS. Any properly configured website is going to do this anyway, the browser also doing it, again, just annoys the piss out of anyone trying to host stuff locally because why the fuck would I get certificates for servers that aren't even exposed to the damn Internet!?
[–] Dylan16807 1 day ago
Attackers won't do it. The browser itself has to put barriers in front of http for public domains.
But yeah it shouldn't get so fussy for local IPs or local DNS.
[–] emn13 21 hours ago
Both from a sheer numbers perspective and also from the perspective of qualitative differences between these audiences browsers are doing the right thing - prioritizing security in low-to-no-trust environments assuming low-to-no-competence administration.
[–] solyin 1 day ago
[–] pelican0 1 day ago
[–] bombcar 1 day ago
[–] bombcar 1 day ago
Welcome to hell. https://en.wikipedia.org/wiki/DNS_over_HTTPS
(My current chrome reports no at https://one.one.one.one/help/ so maybe I changed it or maybe the default's different now)