It is DoH, see the attached original DNS over HTTPS request in the decrypted until.PNG file. In the blog We used mitmproxy to hijack and decrypt the HTTPS session when we showcased our finding so it is easier for readers to follow, maybe that caused confusion.https://twitter.com/bagder/status/1146740062127886338 …
Your opinion is that if it resolves a domain using HTTPS, then it's DoH? Like any cgi script that does gethostbyname(param) and outputs JSON is DoH?
-
-
If it looks like this and is using a DoH resolver then.. it’s close enough for me to shorthand it as DoH.pic.twitter.com/FYZ0fX2UgW
-
I see, I misunderstood the argument. I agree it's okay to refer to that as DoH.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.