Comment

Comment by heavyset_go

DNS isn't encrypted. Anyone passing your DNS queries between you and your DNS provider can inspect them.

DoH or DoT would allow your upstream DNS provider to see your queries, but anyone passing them around wouldn't see the content of the queries.

Comcast won't be able to read those queries if they're encrypted via DoH, and part of their business model involves spying on their customers' queries and selling the data.

DoH has nothing to do with proxying.

parent heavyset_go 7 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton