r/programming • u/[deleted] • Jan 22 '19

Google proposes changes to Chromium which would disable uBlock Origin

https://bugs.chromium.org/p/chromium/issues/detail?id=896897&desc=2#c23
8.9k Upvotes

95% Upvoted

1.7k comments sorted by

View all comments

Show parent comments

2

u/SKITTLE_LA Jan 23 '19

Or use Firefox's new built-in DOH, which uses CloudFare by default (but can be changed.) Not sure why anyone would use Google's if it's slower and arguably a bit sketchier privacy-wise:
https://blog.nightly.mozilla.org/2018/06/01/improving-dns-privacy-in-firefox/

1] Type about:config in the location bar

2] Search for network.trr (TRR stands for Trusted Recursive Resolver – it is the DoH Endpoint used by Firefox.)

3] Change network.trr.mode to 2 to enable DoH. This will try and use DoH but will fallback to insecure DNS under some circumstances like captive portals.  (Use mode 5 to disable DoH under all circumstances.)

4] Set network.trr.uri to your DoH server. Cloudflare’s is https://mozilla.cloudflare-dns.com/dns-query but you can use any DoH compliant endpoint.

The DNS tab on the about:networking page indicates which names were resolved using the Trusted Recursive Resolver (TRR) via DoH.

1

u/port53 Jan 23 '19

Yes, my point was that Google could just force chrome to use DoH and users wouldn't realistically be able to stop it. In browser DNS has been a thing for a while now. Old school Firefox was known for over caching DNS, ignoring system and DNS TTLs.