<div dir="ltr"><div><div dir="ltr" class="m_-2364394410581870291gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">
<table class="m_-2364394410581870291backgroundTable" bgcolor="#ffffff" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td align="left" valign="top">
<table cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="border-top:0px solid rgb(0,0,0);border-bottom:1px solid rgb(255,255,255);background-color:rgb(255,255,255);text-align:center" align="center"><span style="font-size:10px;color:rgb(96,96,96);line-height:200%;font-family:verdana;text-decoration:none">Email
not displaying correctly? <a href="http://www.oplin.org/4cast/" style="font-size:10px;color:rgb(0,0,255);line-height:200%;font-family:verdana;text-decoration:none" target="_blank">View
it in your browser.</a></span></td>
</tr>
<tr>
<td style="border-top:0px solid rgb(51,51,51);border-bottom:0px solid rgb(255,255,255);background-color:rgb(255,255,255)">
<center><a><img id="m_-2364394410581870291editableImg1" src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/4cast_email_header.png" title="OPLIN" alt="OPLIN 4Cast" align="middle" border="0"></a></center>
</td>
</tr>
</tbody>
</table>
<table style="width:763px;height:877px" bgcolor="#ffffff" cellpadding="20" cellspacing="0">
<tbody>
<tr>
<td style="font-size:12px;color:rgb(0,0,0);line-height:150%;font-family:'Gothic Sans',sans-serif" bgcolor="#ffffff" valign="top">
<p>
<span style="font-size:20px;font-weight:bold;color:rgb(0,0,0);font-family:arial;line-height:110%">OPLIN 4Cast #664: Is this new option from Mozilla actually better for privacy?</span><br>
<span style="font-size:11px;font-weight:normal;color:rgb(102,102,102);font-style:italic;font-family:arial">September 18th, 2019</span></p>
<p style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><img align="left" class="m_-2364394410581870291alignleft m_-2364394410581870291size-full m_-2364394410581870291wp-image-6101" src="https://4cast.oplin.org/wp-content/uploads/2019/09/119994512_s.jpg" alt="DNS. Domain Name System. Network Web Communication. Internet and digital technology concept" width="130" height="94" style="padding-right:14px;padding-top:4px;padding-bottom:4px">
A few years ago, a library was having trouble implementing <a href="https://www.oplin.ohio.gov/internet-filtering-service" target="_blank">Umbrella OpenDNS</a> at a branch. The trouble, we discovered, was that the branch's ISP was, unannounced, redirecting all DNS queries to its own servers. They may have been doing this for speed, convenience, or security, but it also gave them the ability to reassign names and redirect traffic, or to collect and sell customers' internet activity.
<br><br>
Recently, Mozilla announced that the Firefox internet browser will soon begin using DNS-over-HTTPS, commonly abbreviated <em>DoH</em>; Google has similar plans for Chrome. DoH hides domain name lookups from your ISP or anyone else on your network, including public WiFi. But the increased privacy comes at a cost (disabling the use of DNS to block malware or manage other filtering policies and preferences), and commentators are ambivalent.
</p><ul>
<li style="list-style-type:none">
</li><li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://www.bleepingcomputer.com/news/technology/google-unveils-dns-over-https-doh-plan-mozillas-faces-criticism/" target="_blank">Google Unveils DNS-over-HTTPS (DoH) Plan, Mozilla's Faces Criticism</a> [<em>BleepingComputer</em>] "Mozilla is about to 'break DNS' because Cloudflare will be used for DNS resolution over what was assigned by system administrator. This will leak the names of all the websites you visit...to Cloudflare."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://www.forbes.com/sites/zakdoffman/2019/09/08/firefox-announces-major-new-encryption-default-to-protect-millions-of-users/#731731918c05" target="_blank">Firefox Plans Controversial New Encryption Setting For Millions, And Update Starts This Month</a> [<em>Forbes</em>] "Firefox will 'fallback' to 'operating system defaults for DNS' when there is a user-driven requirement—this would include child protection technology being in place or enterprise controls. So, essentially, if the browser is trying to limit which sites can be visited, Firefox will look to respect that and not override the system."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://www.eff.org/deeplinks/2019/09/encrypted-dns-could-help-close-biggest-privacy-gap-internet-why-are-some-groups" target="_blank">Encrypted DNS Could Help Close the Biggest Privacy Gap on the Internet. Why Are Some Groups Fighting Against It?</a> [<em>Electronic Frontier Foundation</em>] "EFF is very excited about the privacy protections that DoH will bring, especially since many Internet standards and infrastructure developers have pointed to unencrypted DNS queries as an excuse to delay turning on encryption elsewhere in the Internet. But as with any fundamental shift in the infrastructure of the Internet, DoH must be deployed in a way that respects the rights of the users."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://support.umbrella.com/hc/en-us/articles/360001371526-Web-Browsers-and-DNS-over-HTTPS-default" target="_blank">Web Browsers and DNS over HTTPS default</a> [<em>Umbrella.com</em>] "To protect your Umbrella deployment, Umbrella has now included DoH providers into the Proxy/Anonymizer content category. When this category is blocked, the browser will fail to resolve the hostname of the DoH server, and revert to standard system DNS where Umbrella is covering your DNS."</li>
</ul>
<div style="text-align:left"> </div>
<p style="text-align:left;font-size:20px;font-family:arial;line-height:110%"><small><strong><em>From the <a href="http://ohioweblibrary.org" target="_blank">Ohio Web Library</a>:</em></strong></small><br>
</p>
<div style="text-align:justify;font-size:16px;font-family:arial;line-height:110%">
<ul>
<li>"<a href="https://proxy.oplin.org:2232/advanced/article?id=ar750230&st=dns" target="_blank">Internet Corporation for Assigned Names and Numbers (ICANN)</a>." <em>World Book Advanced</em>, World Book, 2019.</li>
<li>“<a href="https://proxy.oplin.org:2111/login.aspx?direct=true&db=f5h&AN=128867357&site=ehost-live" target="_blank">Cloudflare Launches 1.1.1.1 DNS Service to Improve Internet Privacy</a>.” <em>EWeek</em>, Apr. 2018, p. 1.</li>
<li>Foner, Lenny. “<a href="https://proxy.oplin.org:2111/login.aspx?direct=true&db=buh&AN=11950426&site=ehost-live" target="_blank">Fixing a Flawed Domain Name System</a>.” <em>Communications of the ACM</em>, vol. 44, no. 1, Jan. 2001, pp. 19–21.</li>
</ul>
</div>
<div style="text-align:left"> </div>
</td>
</tr>
<tr>
<td valign="top" width="760"><span style="font-size:10px;color:rgb(96,96,96);line-height:100%;font-family:verdana">
<hr>
<div style="text-align:justify">The <strong><em>OPLIN
4cast</em></strong>
is a weekly compilation of
recent headlines, topics, and trends that could impact public
libraries. You can subscribe to it in a variety of ways, such as: <br>
</div>
<div style="text-align:left"> </div>
<ul>
<li style="text-align:justify"><strong>RSS feed.</strong>
You
can receive the OPLIN 4cast
via RSS feed by subscribing to the following URL:
<a href="http://www.oplin.org/4cast/index.php/?feed=rss2" target="_blank">http://www.oplin.org/4cast/index.php/?feed=rss2</a>. </li>
<li style="text-align:justify"><strong>E-mail.</strong>
You
can have the OPLIN 4cast
delivered via e-mail (a'la OPLINlist and OPLINtech) by subscribing to
the 4cast mailing list at
<a href="http://lists.oplin.org/mailman/listinfo/OPLIN4cast" target="_blank">http://lists.oplin.org/mailman/listinfo/OPLIN4cast</a>. </li>
</ul>
</span> </td>
</tr>
<tr>
<td style="text-align:center;font-family:'Century Gothic',sans-serif;border-top:0px solid rgb(255,255,255);background-color:#2c4587;color:#fff" valign="top" width="760">© 2019 Ohio Public Library Information Network<br>
<a href="http://www.slideshare.net/oplin" title="Find us on Slideshare" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/slideshare3.png" alt="Find us on Slideshare"></a>
<a href="http://www.facebook.com/oplin.org" title="Find us on Facebook" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/facebook_0.png" alt="Find us on Facebook"></a>
<a href="https://plus.google.com/107751358238995507967" title="Find us on Google+" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/google+.png" alt="Find us on Google+"></a>
<a href="http://www.twitter.com/oplin" title="Find us on Twitter" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/twitter_0.png" alt="Find us on Twitter"></a>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div></div></div></div></div></div></div></div>