Firefox activates DNS over HTTPS for US users by default

The privacy push, which encrypts all web traffic, has angered ISPs and regulators

Mozilla has begun the rollout of encrypted DNS over HTTPS (DoH) by default for all its US-based Firefox users after working for years to upgrade the Domain Name System (DNS) protocol.

Over the next few weeks, Firefox users will be able to use the DoH protocol by default while surfing the web, meaning their web traffic will be fully encrypted. This technology blocks third-party interception and also prevents Internet Service Providers from maintaining visibility over users’ activity.

DNS, which remains unchanged since the 80s, has been long-considered an insecure protocol that, while fundamental to the internet’s structure, allows for threats such as man-in-the-middle attacks.

The archaic database links a URL to an IP address, with browsers able to identify the websites for users by matching the two when a query is made. Because there is no encryption, however, other devices may intercept these queries and potentially collect this data.

DNS lookups are often sent to servers that can allow third-parties to gain access to users search and browsing history without their knowledge. It’s one of the key methods that ISPs deploy when implementing tools like web blockers.

“Today, we know that unencrypted DNS is not only vulnerable to spying but is being exploited, and so we are helping the internet to make the shift to more secure alternatives,” Mozilla said.

“We do this by performing DNS lookups in an encrypted HTTPS connection. 

“This helps hide your browsing history from attackers on the network, helps prevent data collection by third parties on the network that ties your computer to websites you visit.”

Mozilla’s DoH implementation involves routing users’ web traffic to a DNS server hosted by either Cloudflare or NextDNS depending on their preference, instead of DNS servers hosted by ISPs and networking companies.

The DoH protocol will be configured by default for US users over the next few weeks, although users outside of the US may activate this level of encryption by accessing the settings menu. This is an option in the connection settings menu.

This privacy-focused move typifies the approach Mozilla has taken in recent years to fine-tuning and differentiating its Firefox browser from a host of competing applications, such as Google Chrome and Microsoft Edge.

Chrome, however, also allows users to adopt DoH, although this will have to be manually configured, unlike for US users in Firefox, and soon across the rest of the world, who will enjoy DoH security by default.

Related Resource

Digital Risk Report 2020

A global view into the impact of digital transformation on risk and security management

Download now

Microsoft, similarly, embraced this protocol in November, announcing it would work to implement more secure technology into its products. This would start with plans to upgrade its servers to use the DoH protocol.

The shift to DoH is expected to anger ISPs, who in the UK previously branded the company an ‘internet villain’ for simply considering implementing the protocol.

Service providers, and regulators like Ofcom, or the FCC in the US, have relied on the DNS protocol for a host of functions, such as implementing content blockers. The mass implementation of DoH would render such tools useless as ISPs would lose all visibility over their customers’ web traffic.

Featured Resources

The complete guide to changing your phone system provider

Optimise your phone system for better business results

Download now

Simplify cluster security at scale

Centralised secrets management across hybrid, multi-cloud environments

Download now

The endpoint as a key element of your security infrastructure

Threats to endpoints in a world of remote working

Download now

2021 state of IT asset management report

The role of IT asset management for maximising technology investments

Download now

Recommended

Chrome vs Firefox vs Microsoft Edge
web browser

Chrome vs Firefox vs Microsoft Edge

23 Sep 2020
Why I’m leading a browser double life
web browser

Why I’m leading a browser double life

8 Jul 2020
How to enable private browsing on any browser
web browser

How to enable private browsing on any browser

1 May 2020
Mozilla fixes two Firefox zero-days being actively exploited
internet security

Mozilla fixes two Firefox zero-days being actively exploited

6 Apr 2020

Most Popular

Raspberry Pi Compute Module 4 launches with PCIe support
Hardware

Raspberry Pi Compute Module 4 launches with PCIe support

19 Oct 2020
Google blocked record-breaking 2.5Tbps DDoS attack in 2017
Security

Google blocked record-breaking 2.5Tbps DDoS attack in 2017

19 Oct 2020
Do smart devices make us less intelligent?
artificial intelligence (AI)

Do smart devices make us less intelligent?

19 Oct 2020