OpenBSD Disabled DoH by Default in Firefox

As a European, I also find it very weird to enable this globally by default. I really don&#x27;t want to send my traffic to a third party on some other continent that gives me a service for free. I pay my ISP good money to do this for me.<p>No idea how common this is in other countries, but my ISP doesn&#x27;t sniff or sell my traffic. I&#x27;ve only ever heard about that on HN or Reddit, which are USA-centric. I guess it also happens in other countries, but in the EU such a thing would have to be made known to the user because it processes personal data.<p>Somehow, adding a Pocket button is bad but sending all visited websites to Cloudflare is good. The top two comments (and many others) on the thread about Pocket can be applied here as well if you just replace the name &quot;Pocket&quot; with &quot;Cloudflare&quot;: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9667809" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9667809</a>

DoH should be supported on the OS network stack, if needed.<p>I can’t understand this move. Firefox should retreat from this default.

I don’t see anything sinister here. Many of us who care about utilizing DoH may already have an appliance that performs this task, but leaving it as an option users can eventually opt into is a good thing.<p>If Google was the one offering DoH, and Otto made this change basically saying, “We don’t want all our traffic going to Google,” I think it would add perspective.

DNS over HTTPS is great for the average user.<p>Anyone who needs some other configuration, clearly is knowledgeable enough to change the behavior.

<a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Zooko%27s_triangle" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Zooko%27s_triangle</a><p>There have been attempts at solving this through P2P DNS resolution. But, it&#x27;s just hard to store all those records locally and keep them up-to-date regularly. Perhaps, we could cache and update records for the &quot;popular&quot; domains regularly and reach out to Cloudflare&#x2F;other DoH or DoTLS providers when the tier 1 lookup fails?

Possible Future abuses aside, I much prefer knowing who I&#x27;m trusting Mozilla and CloudFlare with a public reputations to preserve than ISPs that make no assertions and regularly voilate privacy.

Instead of using a different DoH server than the user set DNS servers, Firefox should test if the user supplied DNS servers support DoH and opportunistically switch over to that.

Does anyone know a good resource for someone who hasn&#x27;t done a deep dive on networking in a while, but wants to brush up on the technicals of how DoH works?