Last month, Mozilla announced the availability of DNS over HTTPS (DoH), Firefox will by default use DoH rather than traditional DNS.
Compared to the traditional DNS, and cloud service providers to make a DNS request through HTTPS, on a non-cached DNS queries minimal performance impact, most of the queries only about 6 milliseconds slower, but weigh the security and privacy of data perspective, Mozilla think it is acceptable costs. And in some cases, even faster than a conventional DNS hundreds of milliseconds.
This might be a good improvement for ordinary users, but all users need to resolve traffic through a third-party cloud vendors (Mozilla choice of partners is Cloudflare), this is indeed there may be privacy and data security issues. Users fear that their data will be utilized in the near future it caused a lot of negative speculation for Mozilla.
For example, we reported the OpenBSD project is to change the default Firefox enabled DoH approach:
DoH disabled by default. While encryption DNS may be a good thing, but by default, sends all DNS traffic to Cloudflare not a good idea. Applications should respect the OS configuration. If necessary, you can still cover the DoH set.
So, Mozilla recently updated the FAQ page to address some of the problems on its activities DoH project, which comes to the issues related to cooperation with the Cloudflare, Mozilla said: cooperation with Cloudflare does not involve any exchange of money, will seek the express prior enabled user's consent, the user can choose to disable or enable, select Cloudflare because it can meet its strict privacy requirements.
The three translation-related questions are as follows:
Q: Mozilla parser as how to choose Cloudflare trusted?
A：Cloudflare 能够满足我们当前已制定的严格策略要求。这些要求在我们与 Cloudflare 的具有法律约束力的合同中得到了支持，并在隐私声明中予以公开，该声明记录了这些政策并向用户提供了透明度。
Q：将 DNS 请求路由到 Cloudflare，Mozilla 是否会获得报酬？
A：将 DNS 请求路由到 Cloudflare 没有涉及任何金钱交易。
Q：Mozilla 或 Cloudflare 是否可以通过这些数据获利？
A：不，我们的政策明确禁止利用这些数据变现。我们使用此功能的目标是为用户提供重要的隐私保护，并使现有的 DNS 解析程序更难以通过用户的 DNS 数据获利。
详情查看 Mozilla 的页面：
https://support.mozilla.org/zh-CN/kb/dns-over-https-doh-faqs#w_dns-over-https-partnerships