Conversation

Notices

1. Embed this notice
   The Psychotic Network Ferret (nuintari@infosec.exchange)'s status on Tuesday, 21-Nov-2023 03:19:39 JST The Psychotic Network Ferret

   Am I reading this correctly? The #PaleMoon fork of #Firefox refuses to implement #DNS over #HTTPS

   And a #FreeBSD port exists?!?!

   MY PRAYERS HAVE BEEN FUCKING ANSWERED!

   Fuck #DoH, and fuck every browser trying to make it the norm.

   • Embed this notice
     feld (feld@bikeshed.party)'s status on Tuesday, 21-Nov-2023 03:19:38 JST feld

     in reply to
     @nuintari set the following in your DNS recursor and it will never use DoH on Firefox
     
     
     use-application-dns.net. in A 127.0.0.1
   • Embed this notice
     Nicolas Schodet (schodet@mstdn.fr)'s status on Tuesday, 21-Nov-2023 04:42:14 JST Nicolas Schodet

     in reply to

     • feld

     @feld @nuintari I think you have to make it return NXDOMAIN for example.

     "The result will be considered negative if:

     A response code other than NOERROR is returned, such as NXDOMAIN (non-existent domain) or SERVFAIL.

     A NOERROR response code is returned, but contains neither A nor AAAA records.

     The result will be considered positive if the query completes with NOERROR and contains A or AAAA records (or both).

     A negative result will be a signal to disable application DNS, (i.e., DoH)."

     feld likes this.
   • Embed this notice
     feld (feld@bikeshed.party)'s status on Tuesday, 21-Nov-2023 04:42:34 JST feld

     in reply to

     • Nicolas Schodet
     @schodet @nuintari wow damn, you're right. I've had the wrong configuration for a long time. :stonk:
     
     (I don't use Firefox except for rare testing needs, though)