this post was submitted on 03 Oct 2023
634 points (98.9% liked)

Firefox

17656 readers
1072 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago
MODERATORS
k_o_t@lemmy.ml
634
Say (an encrypted) hello to a more private internet. (blog.mozilla.org)
submitted 1 year ago by buh@lemmy.world to c/firefox@lemmy.ml
64 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] dan@upvote.au 5 points 1 year ago

Ordinary DNS requests are always plaintext and readable to anyone between you and the DNS server.

Not just readable... The ISP can inject their own responses too. Regular DNS is both unencrypted and unauthenticated, with most clients not enforcing DNSSEC.