DNS over HTTPS (and all its friends & relations) (2019)
reddit / BSD

----------------------------------------------------------------------
Kernigh · 2019-10-12 01:40

After 25:00, Paul Vixie mentions
[https://dnstap.info/](https://dnstap.info/) (a way to log DNS
messages) and [https://dnsrpz.info/](https://dnsrpz.info/) (a way to
filter DNS). Malware might use DNS over HTTPS to bypass filters. The
video proposes to block DNS over HTTPS. The demo uses some features of
FreeBSD's firewall, but is not yet able to block DNS over HTTPS.

----------------------------------------------------------------------
0x3639 · 2019-10-12 07:24

Yeah DoH traffic won't be able to be easily distinguished from any
other HTTPS traffic.

I'm pretty sure this means that stuff like the piHole which uses DNS
blocking will become ineffective.