139
U.S. Lawmakers Work on Unified Site-Blocking Bill to Counter Online Piracy * TorrentFreak (torrentfreak.com)
submitted 7 months ago by to c/piracy@lemmy.dbzer0.com
32 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 7 months ago* (last edited 7 months ago) (2 children)

Best solution is not using dns in the first place though.

Use DNS over HTTPS (or TLS or QUIC). I think some browsers use it by default now. If there's country-specific blocks, use your own recursive DNS server, or one in another country.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 7 months ago* (1 child)

    Can still be messed with by the Isp not saying dns encrypt is a solution but it will bypass this, not much it can do against direct IP blocking mind you for that you need vpn or a service like tor/i2p.

    Does stop the this has been blocked by court order type messages though and does it well.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 7 months ago

    Can still be messed with by the Isp

    Not as easily though. It's like regular HTTPS - if anyone, including the ISP, tries a MitM (man in the middle) attack, you'll get a security error because the certificate won't be trusted. The only real way for a MitM attack to be successful is installing a custom root certificate on the client system.

    Like you mentioned, IP blocking is harder to bypass, but that's unrelated to DNS blocking. IP blocking is harder to do if the site uses a CDN like CloudFront, BunnyCDN, Cloudflare, etc though, since a large number of sites use the same IPs.

  • permalink
  • fedilink
  • source
  • parent