ESET Security! DNS-over-HTTPS is probably more of a two-edged sword.

ESET Security. In the early days of the internet, it was common for local networks to manage their own domain name service (DNS).DNS was created to enable internet users to access remote servers using simple, memorable names like google.com. These names are far easier to remember than the more complex IP addresses, such as 64.233.160.0, which are linked to domain names. Through this system, users can request google.com without needing to remember or calculate the corresponding IP address, which is handled by a series of dedicated servers. ESET Security has made it easier for protecting IP Adresses.

Over the years, there has been a growing trend to move internet infrastructure, including DNS services, away from local networks and into the hands of large internet service providers (ISPs).
Today, most people and businesses rely on the default DNS service provided by their ISP rather than setting up their own. This shift has raised concerns among industry experts, particularly regarding the loss of user privacy. ESET.

The influence of major technology companies has not gone unnoticed by the public and some political figures in the United States.
Many believe that breaking up monopolies and promoting more competition and fairer terms for consumers is necessary. For instance, Vermont Senator Bernie Sanders has called for ISPs to separate from their large corporate holdings. During his recent presidential campaign, Sanders pledged to dismantle the monopolies held by a few major ISPs, which he views as utilities-like entities that have been unfairly extracting money from businesses and the general public.

Can privacy be restored with encryption?

Some argue that by implementing encryption, more privacy can be reclaimed from ISPs in light of this trend toward increased reliance on ISP providing. As a result, there is a new global craze for data encryption as people race to find online privacy, and data protection laws like the CCPA and GDPR are pushing companies to use encryption.
Therefore, the question that still has to be answered is how DNS-over-HTTPS (DoH), the newest DNS encryption technology, will actually affect privacy.

DoH shifts privacy into new hands. ESET SECURITY.

 

Users may feel they have greater privacy when they know their DNS requests are encrypted through DoH when browsing with Chrome or Firefox. However, DoH may not be as beneficial as it seems—while it prevents ISPs and IT administrators from seeing your domain requests, DNS providers can still access them.  In short, the privacy gained from DoH is limited to moving trust from your ISP to your chosen DNS provider, such as Google, Firefox, or others like BT, which means placing trust in major technology companies.

This is part of the reason DNS expert Dr.
Paul Vixie praised Google for making the stable addresses for its DoH service publicly available.IT administrators can easily block Google Chrome’s DoH service on their networks. Additionally, Chrome users still have the option to choose their own DNS provider and are not forced to use Google’s encrypted DNS service. For further insight into Dr.Vixie’s views on the benefits of running local DNS resolution servers, you can read his Dark Reading article, “Benefits of DNS Service Locality.”