this post was submitted on 03 Oct 2023
636 points (98.9% liked)

Firefox

17865 readers
7 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago
MODERATORS
[email protected]
636
Say (an encrypted) hello to a more private internet. (blog.mozilla.org)
submitted 1 year ago by [email protected] to c/[email protected]
64 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 5 points 1 year ago

Ordinary DNS requests are always plaintext and readable to anyone between you and the DNS server.

Not just readable... The ISP can inject their own responses too. Regular DNS is both unencrypted and unauthenticated, with most clients not enforcing DNSSEC.