> DNS over HTTPS is by itself bad enough, and highly criticized with good reason
The criticisms of DoH seem to be around removing the ability of third parties to snoop on your DNS queries. Am I missing something here?
Like, yes, some of the use cases outlined in the linked wiki article [0] are arguably legitimate (parental controls, cybersecurity identification of C&C nodes), but then we quickly move into murkier territory (ISP blockages due to government mandates).
Preventing MitM attacks is an explicit design goal of DoH, not a side effect.
The criticisms of DoH seem to be around removing the ability of third parties to snoop on your DNS queries. Am I missing something here?
Like, yes, some of the use cases outlined in the linked wiki article [0] are arguably legitimate (parental controls, cybersecurity identification of C&C nodes), but then we quickly move into murkier territory (ISP blockages due to government mandates).
Preventing MitM attacks is an explicit design goal of DoH, not a side effect.
[0] https://en.wikipedia.org/wiki/DNS_over_HTTPS#Criticisms_and_...