from Hacker News

Ask HN: Why is Oblivious DoH needed at all? Wouldn't any proxy do the job?

by pcwrt on 12/10/20, 3:33 PM with 4 comments

With DoH, query integrity and confidentiality are already guaranteed. The only additional ask for something like ODoH is to hide the client IP address from the DNS. For which, any proxy will do. Why bother to go through all the complexities to create ODoH?

If you want to see some details, I compared ODoH with a plain HTTP proxy here: https://www.pcwrt.com/2020/12/oblivious-dns-over-https-vs-doh-through-http-proxy/

  • by collsni on 12/10/20, 5:19 PM

    What I do is dns over tls through a proxy that way my proxy service can't sniff my queries either. And the dns resolver doesn't know the true source.
  • by yonixw on 12/10/20, 4:49 PM

    Maybe to have an edge over Google free DNS (8.8.8.8).