{"id":89734,"date":"2019-09-16T23:52:09","date_gmt":"2019-09-17T06:52:09","guid":{"rendered":"https:\/\/www.intego.com\/mac-security-blog\/?p=89734"},"modified":"2019-09-17T00:29:35","modified_gmt":"2019-09-17T07:29:35","slug":"firefox-and-chrome-rolling-out-dns-over-https-doh-feature","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/firefox-and-chrome-rolling-out-dns-over-https-doh-feature\/","title":{"rendered":"Firefox and Chrome rolling out DNS over HTTPS (DoH) feature"},"content":{"rendered":"

\"\"<\/p>\n

Earlier this month, Mozilla announced that Firefox will begin enabling \u201cDNS over HTTPS\u201d (DoH) by default<\/a> for USA-based users. Not intending to be left behind in the pursuit of safer browsing, Google has announced that it, too, will begin experimenting with the feature; Chrome 78 will validate Google\u2019s implementation of DNS over HTTPS<\/a>.<\/p>\n

What DNS over HTTPS (DoH) does<\/h3>\n

Google notes that \u201cthe idea is to bring the key security and privacy benefits of HTTPS to DNS, which is how your browser is able to determine which server is hosting a given website.\u201d DNS queries are normally sent via plaintext, which makes it possible for other users to see what websites you\u2019re visiting if you\u2019re on an unsecured Wi-Fi network\u2014and also makes you vulnerable to potential attacks like spoofing.<\/p>\n

DoH leverages the more secure protocol HTTPS to prevent these kinds of monitoring and attacks from occurring, increasing both security and privacy for users.<\/p>\n

Which browsers will support DoH<\/h3>\n

For now, the only major browsers scheduled to support DoH are Mozilla Firefox and Chrome 78 or higher (although, notably, Chrome for iOS as well as Chrome for Linux will not be supporting this feature).<\/p>\n

It remains to be seen if Apple\u2019s Safari will follow suit, but given that Apple touts user security and privacy as major benefits of its platforms, it may only be a matter of time before the feature could come to Safari for Mac, iPad, and iPhone.<\/p>\n

What you will notice when DoH is enabled<\/h3>\n

Ideally, when DoH is enabled, you won\u2019t notice a thing. Both Firefox and Chrome have implemented extensive fallback mechanisms for situations where DoH might fall over, such as a DNS provider that doesn\u2019t support DoH, ISPs that provide parental controls, or strictly managed enterprise networks.<\/p>\n

The bottom line for both browsers is that if DoH won\u2019t operate as intended, the browser will simply fall back to the standard method of DNS lookup if necessary.<\/p>\n

How to benefit from DoH on iOS<\/h3>\n

Although the Mac versions of Firefox and Chrome are slated to have DNS over HTTPS added soon, this enhancement doesn’t seem to be coming soon to the iOS versions of the browsers.<\/p>\n

However, there’s another way to get DoH working on your iPhone, iPad, or iPod touch; the app for\u00a0Cloudflare’s DNS service “1.1.1.1”<\/a> includes a feature to send all DNS lookups over your choice of two secure protocols: DNS over HTTPS or DNS over TLS. Of course, the app only works with Cloudflare’s DNS service; you can’t use it with any other DNS servers. You can get the 1.1.1.1 app on the iOS App Store<\/a>.<\/p>\n

\"\"

Cloudflare’s 1.1.1.1 iOS app can also leverage DNS over HTTPS<\/p><\/div>\n

Learn more<\/h3>\n

More information about the upcoming addition of DoH to Chrome and Firefox, including how to enable DoH in Chrome 78<\/a>, is available at The Hacker News.<\/p>\n

To learn more about how DNS works and why it’s important to secure it, check out Intego’s article about Cloudflare’s 1.1.1.1 DNS service<\/a>.<\/p>\n

\"\"<\/a>Every week, Intego’s experts discuss Apple security on the Intego Mac Podcast<\/strong>, so be sure to subscribe<\/a> to make sure you don’t miss the latest episode. You’ll also want to subscribe to our e-mail newsletter<\/strong> and keep an eye here on The Mac Security Blog<\/strong> for updates.<\/p>\n

You can also follow Intego on your favorite social and media channels: Facebook<\/a>, Instagram<\/a>, Twitter<\/a>, and YouTube<\/a>\u00a0(click the ?\u00a0to get notified about new videos).<\/p>\n","protected":false},"excerpt":{"rendered":"

Earlier this month, Mozilla announced that Firefox will begin enabling \u201cDNS over HTTPS\u201d (DoH) by default for USA-based users. Not intending to be left behind in the pursuit of safer browsing, Google has announced that it, too, will begin experimenting with the feature; Chrome 78 will validate Google\u2019s implementation of DNS over HTTPS. What DNS […]<\/p>\n","protected":false},"author":100,"featured_media":89743,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[5],"tags":[38,4558,56,181],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n