What's the point of DoH/DoT

  • ATTENTION! As of November 1, 2020, you are not able to reply to threads 6 months after the thread is opened if there are more than 500 posts in the thread.
    Threads will not be locked, so posts may still be edited by their authors.
    Just start a new thread on the topic to post if you get an error message when trying to reply to a thread.

nikr

Occasional Visitor
I've been running Pihole with cloudflare doh proxy for sometime now. While it works ok, I've been considering ditching it for Asus-merlin built in dot with nextdns. But does DoH/DoT makes any difference. My ISP can still see the IPs i am communicating with and can do reverse dns lookup to see what I am doing if they want to and if they dont it does not really matter anyways. I understand it prevents alteration of reply but that can also be accomplished with dnssec.

I know I am missing something, but cannot figure out what..
 
Last edited:

bbunge

Very Senior Member
I've been running Pihole with cloudflare doh proxy for sometime now. While it works ok, I've been considering ditching it for Asus-merlin built in dot with nextdns. But does DoH/DoT makes any difference. My ISP can still see the IPs i am communicating with and can do reverse dns lookup to see what I am doing if they want to and if they dont it does not really matter anyways. I understand it prevents alteration of reply but that can also be accomplished with dnssec.

I know I am missing something, but cannot figure out what..
Much has been written on the topic. Boils down to what level of security or no security you are comfortable with.
This is a bit old but good: https://blog.apnic.net/2018/08/20/dnssec-and-dns-over-tls/
As for me I feel more comfortable using DoT (not DoH) with DNSSEC. We've gotten both built into the Merlin custom firmware for Asus routers.
 

New2This

Senior Member

Treadler

Very Senior Member
An interview with Bill Woodcock (Quad 9 DNS) here.
He has quite the definite view of DoT vs DoH.
Well worth a read........

 
  • Like
Reactions: Gar

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top