Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread Noel Butler via mailop
On 07/07/2020 15:11, Andrew C Aitchison via mailop wrote: > On Tue, 7 Jul 2020, Noel Butler via mailop wrote: > > On 07/07/2020 01:01, Johann Klasek via mailop wrote: > > I have been told that DoH is set into place to solve the privacy > problem. On a small DNS workgroup meeting I saw a presenta

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread Andrew C Aitchison via mailop
On Tue, 7 Jul 2020, Noel Butler via mailop wrote: On 07/07/2020 01:01, Johann Klasek via mailop wrote: I have been told that DoH is set into place to solve the privacy problem. On a small DNS workgroup meeting I saw a presentation on how they statistically identify users by their DNS traffic,

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread Andrew C Aitchison via mailop
Executive summary: DoH is intended to reset the balance of control and data collection from ISPs, system and network administrators towards (browser) users. On Mon, 6 Jul 2020, Michael Peddemors via mailop wrote: One thing not mentioned so far in this thread, is data collection.. While many D

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread Noel Butler via mailop
On 07/07/2020 01:49, John Levine via mailop wrote: > In article <20200706150152.ga9...@tron.kom.tuwien.ac.at>, > >> I have been told that DoH is set into place to solve the privacy >> problem. On a small DNS workgroup meeting I saw a presentation on how >> they statistically identify users by th

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread Noel Butler via mailop
On 07/07/2020 01:01, Johann Klasek via mailop wrote: > I have been told that DoH is set into place to solve the privacy > problem. On a small DNS workgroup meeting I saw a presentation on how > they statistically identify users by their DNS traffic, and could create > a profile with interests and

Re: [mailop] Google: 'Low reputation of the sending domain'

2020-07-06 Thread Bjoern Franke via mailop
Hi, There are no breaches or spam or anything sent from that server. I would know as I am part of the AS6772 Abuse Desk. :-) Just the dozed or so emails per day sent by my family members and myself. Even emails to my own Gmail Account where my sending email address for sure is a know past send

Re: [mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy Holidays Everyone!)

2020-07-06 Thread Chris via mailop
On 2020-07-06 06:39, Jaroslaw Rafa via mailop wrote: Dnia 5.07.2020 o godz. 14:13:03 Chris via mailop pisze: Not to mention DNS over HTTPS breaks or renders ineffective most types of content filtering. That's a secondary concern perhaps. I'm betting 99% of users don't have content filtering

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread John Levine via mailop
In article <20200706150152.ga9...@tron.kom.tuwien.ac.at>, >I have been told that DoH is set into place to solve the privacy >problem. On a small DNS workgroup meeting I saw a presentation on how >they statistically identify users by their DNS traffic, and could create >a profile with interests and

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread Johann Klasek via mailop
On Mon, Jul 06, 2020 at 07:10:11AM -0700, Michael Peddemors via mailop wrote: > One thing not mentioned so far in this thread, is data collection.. > > While many D'oh providers claim NOT to log or track, simply by using > HTTPS opens up the door to exposing personal browsing habits.. > > It is v

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread Michael Peddemors via mailop
One thing not mentioned so far in this thread, is data collection.. While many D'oh providers claim NOT to log or track, simply by using HTTPS opens up the door to exposing personal browsing habits.. It is very easy to simply 'extend' any HTTPS request, to include other information in the req

Re: [mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy, Holidays Everyone!)

2020-07-06 Thread Joel M Snyder via mailop
On 7/6/20 4:00 AM, Jaroslaw Rafa wrote: > But is content filtering - especially in corporations - really based on DNS? Yes. There's a big company, Cisco (you may have heard of them) which bought OpenDNS and which is aggressively pushing their DNS-based filtering service (called Umbrella) as p

Re: [mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy Holidays Everyone!)

2020-07-06 Thread Matt Harris via mailop
On Mon, Jul 6, 2020 at 3:48 AM Vittorio Bertola via mailop < mailop@mailop.org> wrote: > > The bad idea is taking an extremely marginal use case ("there is a > dissident in a third world country whose government is blocking access to > Wikipedia via DNS and we want to circumvent that block") and u

Re: [mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy Holidays Everyone!)

2020-07-06 Thread Thomas Walter via mailop
Hello Jaroslaw, On 06.07.20 12:39, Jaroslaw Rafa via mailop wrote: > But is content filtering - especially in corporations - really based on DNS? yes. That's why systems like https://pi-hole.net/ exist, even for home users. In Germany ISPs were even forced by lawmakers to block specific DNS host

Re: [mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy Holidays Everyone!)

2020-07-06 Thread Jaroslaw Rafa via mailop
Dnia 5.07.2020 o godz. 14:13:03 Chris via mailop pisze: > >>Not to mention DNS over HTTPS breaks or renders ineffective most > >>types of content filtering. > > >That's a secondary concern perhaps. I'm betting 99% of users don't > >have content filtering and don't want it. > > Corporates need it

Re: [mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy Holidays Everyone!)

2020-07-06 Thread Vittorio Bertola via mailop
> Il 06/07/2020 09:41 Andrew C Aitchison via mailop ha > scritto: > > I have mixed feelings about Mozilla defaulting the world (or the USA) to DoH > (technically I don't like it, but I sympathize with the philosophical > idea) but that doesn't explain why DoH itself is a bad idea. DoH is not

Re: [mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy Holidays Everyone!)

2020-07-06 Thread Andrew C Aitchison via mailop
On Sun, 5 Jul 2020, Chris Lewis via mailop wrote: On 2020-07-05 15:19, Jay R. Ashworth via mailop wrote: An argument I could tolerate -- corporate IT types can be expected to diagnose smartly enough to deal with it... though it will still make things more difficult for them. Impossible for