[tor-dev] DNS-over-HTTPS (DOH) in Firefox/Torbrowser

[nusenu]

Hi,

since Mozilla did tests [0] on DOH [1] in Firefox I was wondering
if Torbrowser developers have put any thought into that as well?

Note: I'm _not_ suggesting to use DOH in torbrowser I'm just asking because
the answer probably matters for exit documentation in the relay guide
if clients do DNS themselves over TCP connections instead of relying on the exit
(even if torbrowser is not the only tor client).

thanks,
nusenu




[0] https://www.ghacks.net/2018/03/20/firefox-dns-over-https-and-a-worrying-shield-study/
[1] https://datatracker.ietf.org/doc/draft-hoffman-dns-over-https/

[teor]

Hi,

Post by nusenu
since Mozilla did tests [0] on DOH [1] in Firefox I was wondering
if Torbrowser developers have put any thought into that as well?
Note: I'm _not_ suggesting to use DOH in torbrowser I'm just asking because
the answer probably matters for exit documentation in the relay guide
if clients do DNS themselves over TCP connections instead of relying on the exit
(even if torbrowser is not the only tor client).
thanks,
nusenu
[0] https://www.ghacks.net/2018/03/20/firefox-dns-over-https-and-a-worrying-shield-study/
[1] https://datatracker.ietf.org/doc/draft-hoffman-dns-over-https/

The latest version of the spec is:
https://datatracker.ietf.org/doc/draft-ietf-doh-dns-over-https/

T

[Georg Koppen]

Post by nusenu
Hi,
since Mozilla did tests [0] on DOH [1] in Firefox I was wondering
if Torbrowser developers have put any thought into that as well?

Actually, the study did not get done yet. The start date is scheduled
for June 4th, see: https://bugzilla.mozilla.org/show_bug.cgi?id=1446404

We'll look at the code in the coming weeks when doing our audit for
ESR60 and we'll follow the Mozilla experiment closely. Right now we
don't have plans to enable DOH in Tor Browser 8.

Georg