• bobs_monkey@lemm.ee
    link
    fedilink
    English
    arrow-up
    30
    arrow-down
    1
    ·
    1 year ago

    Encrypted DNS, widely known as DNS over HTTPS, protects DNS traffic by encrypting it.

    Ya don’t say.

    • kautau@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      The missile knows where it is at all times. It knows this because it knows where it isn’t. By subtracting where it is from where it isn’t, or where it isn’t from where it is (whichever is greater), it obtains a difference, or deviation. The guidance subsystem uses deviations to generate corrective commands to drive the missile from a position where it is to a position where it isn’t, and arriving at a position where it wasn’t, it now is. Consequently, the position where it is, is now the position that it wasn’t, and it follows that the position that it was, is now the position that it isn’t.

      In the event that the position that it is in is not the position that it wasn’t, the system has acquired a variation, the variation being the difference between where the missile is, and where it wasn’t. If variation is considered to be a significant factor, it too may be corrected by the GEA. However, the missile must also know where it was.

      The missile guidance computer scenario works as follows. Because a variation has modified some of the information the missile has obtained, it is not sure just where it is. However, it is sure where it isn’t, within reason, and it knows where it was. It now subtracts where it should be from where it wasn’t, or vice-versa, and by differentiating this from the algebraic sum of where it shouldn’t be, and where it was, it is able to obtain the deviation and its variation, which is called error.

    • lemmyvore@feddit.nl
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 year ago

      This older comment explains how ECH works.

      ECH is technically unrelated to DoH, ECH is a HTTP extension not a DNS extension. But it uses the DoH encryption because it can’t use the HTTP encryption because of the chicken-and-egg problem explained in that comment, so… it basically latched onto DoH as a solution and in doing that tied the two together.

      And to answer your question, DoH is usable on its own without ECH because ECH is not needed for DNS. But ECH is strongly desirable for HTTP, and it also requires DoH, so that’s why Mozilla for example activated then as a package deal in Firefox (both or neither).

  • surewhynotlem@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    “Mullvad’s encrypted DNS solution is available free of charge for everyone. The company advises customers of its DNS service, which is available for a flat-fee of 5 EUR per month, not to use the encrypted DNS service as the DNS resolver of the VPN server is handling this automatically. The performance of connections could be slower, if users make the switch.”

    This nonsense was written either by an AI or a drunk.

    • bandwidthcrisis@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      1 year ago

      Maybe the second “DNS” should be “VPN”:

      The DNS is free. They advise users of their paid VPN not to use this DNS service as it already uses it behind the scenes.

  • BackpackCat@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    I use mullvad and I’m too dumb to understand what this means. Can one of lemmy’s many IT experts ELI5?

    • pelya@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      This makes it harder for russian military to steal one of Mullvad servers to track your porn usage over VPN - once they unplug it, all links to porn will be gone.