DoH disabled by default in Firefox

Contributed by Paul 'WEiRD' de Weerd on 2019-09-11 from the put-your-names-in-the-crypt dept.

On Monday, Otto (otto@) committed a small but significant change to the Firefox port.

Date: Mon, 9 Sep 2019 12:50:35 -0600 (MDT)
From: Otto Moerbeek <otto@[elided]>
To: ports-changes@openbsd.org
Subject: CVS: cvs.openbsd.org: ports
Sender: owner-ports-changes@openbsd.org

CVSROOT:        /cvs
Module name:    ports
Changes by:     otto@cvs.openbsd.org    2019/09/09 12:50:35

Modified files:
        www/mozilla-firefox: Makefile
        www/mozilla-firefox/files: all-openbsd.js

Log message:
Disable DoH by default.  While encrypting DNS might be a good thing,
sending all DNS traffic to Cloudflare by default is not a good idea.
Applications should respect OS configured settings.
The DoH settings still can be overriden if needed. ok landry@ job@

If you are running your own DNS over HTTPS (DoH) server, you may want to point Firefox at it using the network.trr.uri configuration option in about:config, and overriding the network.trr.mode setting that Otto changed to 5 in this commit to 3. For more details on how to configure Firefox's use of DoH, please see their wiki.

(Comments are closed)

Comments

By mccoma (mccoma) on 2019-09-11 14:22

Is there a package for OpenBSD to run your own DNS over HTTPS server?
Comments
1. By Otto Moerbeek (ottom) otto@drijf.net on 2019-09-12 09:36
  
  Not yet. unbound (in base) support DoT (DNS over TLS)
  Th upcoming PowerDNS dnsdist 1.4.0 release will support both DoT and DoH. I expect it to be included in the packages for the upcoming OpenBSD 6.6 release.

Latest Articles

Tue, Sep 10
- 05:39 Game of Trees 0.103 released (0)
Sun, Aug 25
- 09:13 rpki-client 9.2 released (0)
Sat, Aug 24
- 11:46 No unmodified files remain from original import of OpenBSD (0)
Wed, Aug 14
- 20:39 Game of Trees 0.102 released! (0)
- 05:31 The BSDCan 2024 Playlist is now complete (0)
Thu, Aug 08
- 09:26 OpenBSD -current moves to 7.6-beta (1)
Mon, Jul 29
- 12:27 Possible future vmm(4)/vmd(8) on arm64 (1)
Sat, Jul 27
- 11:05 UDP parallel input committed to -current (0)
Wed, Jul 24
- 05:28 Incoming: UDP parallel input (1)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]