Questo dovrebbe essere dirompente per molti degli schemi di censura in Italia, basati su DNS DPI <https://blog.nightly.mozilla.org/2018/06/01/improving-dns-privacy-in-firefox...> Domain Name Service (DNS) is one of the oldest parts of internet architecture, and remains one that has largely been untouched by efforts to make the web safer and more private. On the Firefox network and security teams, we’re working to change that by encrypting DNS queries and by testing a service that keeps DNS providers from collecting and sharing your browsing history. For more than 30 years, DNS has served as a key mechanism for accessing sites and services on the web. Browsers (including Firefox) use DNS to access a distributed database that turns URLs into TCP/IP addressing information. Firefox cannot do much without the service. DNS hails from the days of a kinder, more gentle Internet where it was normal to make this kind of query using unencrypted protocols and send them to any nearby server who claimed to be able to answer it. This approach is no longer a fit for the modern Internet. Because there is no encryption, other devices along the way might collect (or even block or change) this data too. DNS lookups are sent to servers that can spy on your website browsing history <https://cdt.org/blog/dns-strengthening-the-weakest-link-in-internet-privacy/> without either informing you or publishing a policy about what they do with that information. While sophisticated users can turn to cloud-based “open resolvers” that offer better privacy controls than what is available by default from most internet service providers (ISPs), these resolvers rely on the same old unencrypted protocols so ISPs can often intercept data anyway. Our first effort to upgrade the privacy of DNS is to implement the DNS over HTTPS (DoH) protocol, which encrypts DNS requests and responses. See Lin Clark’s terrific explainer <https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-over-https/> about how DNS over HTTPS can really improve the state of the art. DoH support has been added to Firefox 62 to improve the way Firefox interacts with DNS. DoH uses encrypted networking to obtain DNS information from a server that is configured within Firefox. This means that DNS requests sent to the DoH cloud server are encrypted while old style DNS requests are not protected. DoH standardization is currently a work in progress <https://datatracker.ietf.org/doc/draft-ietf-doh-dns-over-https/?include_text...> and we hope that soon many DNS servers will secure their communications with it. Firefox does not yet use DoH by default. See the end of this post for instructions on how you can configure Nightly to use (or not use) any DoH server. Our second effort focuses on building a default configuration for DoH servers that puts privacy first. We are running a shield study <https://support.mozilla.org/en-US/kb/shield> where some Nightly users will participate in one or more experiments to help us build out a secure, cloud-based service that handles DoH requests. All Nightly users will receive an in-product notification about these studies. Cloudflare is our partner for these experiments. When a shield study is active, Nightly Firefox will automatically use Cloudflare’s secure DNS over HTTPS <https://blog.cloudflare.com/dns-resolver-1-1-1-1/> service (though we aren’t using the famous 1.1.1.1 address). The first study will test whether DoH’s performance is up to the task. [...]