Re: [SOLVED] Re: Firefox: Warning: Potential Security Risk Ahead for the USPS.com
On Wed, 5 Jan 2022 06:10:48 +0100
<tomas@tuxteam.de> wrote:
> On Tue, Jan 04, 2022 at 04:05:11PM -0500, Celejar wrote:
>
> [...]
>
> > One way "to combine DoH with resolving 14,000 addresses to 127.0.0.1"
> > is by using Pi-hole. Some people have *millions* of domains blacklisted
> > in Pi-hole:
>
> Pi-hole won't help unles it also does HTTPS proxying (that means it
> would have to play MITM). As far as I know it "just" does conventional
> DNS proxying (which is a great thing to do, mind you).
Why won't it help? What won't it help with? If you mean that the
queries won't be secure during the leg between the client and
the Pi-hole, we're talking about running Pi-hole within one's trusted
network (or connecting to it over a VPN, etc.)
>
> But hey, full HTTP(S) proxying would be a great thing to do. Still,
> you'd have to munge your browser's trusted certs for that trick to work.
Celejar
Reply to: