At Mozilla the testing phase for DNS over HTTPS (DoH) support and plans to launch the feature in the United States by the end of the current month. After the full launch, they will consider deploying the protocol in other countries.
This technology allows for the encryption of DNS traffic, although users will be able to disable the feature in the browser and use regular DNS queries. It is likely that users of parental control systems and corporate networks will do this, as these have verification systems to automatically disable DoH.
Such technology can be useful for protecting against data leaks through provider DNS servers. It can also be used against MITM attacks, DNS traffic tampering, bypassing blocks at the level domain names and so on. After all, the current DNSSEC standard only uses encryption for client and server authentication but does not protect against interception or tampering of data.
Activating DoH in about:config is done using the variable network.trr.mode, which was introduced in Firefox 60. With a value of 0, DoH is completely disabled. A value of 1 allows automatic selection between DNS or DoH depending on which works faster. With 2, DoH is used by default, with DNS as a fallback option. A value of 3 enables only DNS over HTTPS. Finally, setting the parameter to 4 activates the mirroring mode, in which DoH and DNS operate simultaneously, utilizing the CloudFlare DNS server, though this can be changed.
Source: 3dnews.ru
