They do worse than block it, the redirect it to their own servers.
And the data is worth it at volume. They have hundreds of thousands of users, along with the region they are in, as well as data on what websites they visit.
Advertisers have and continue to pay for that data.
They could technically just drop and traffic over port 53 that is not destined to their own DNS servers. But that’s china level shit. I’ve never seen an ISP control this in North America.
They can also redirect that traffic to their own DNS servers, so you think you are using 3rd party DNS, when you are actually still using theirs. This became legal when the Trump administration got rid of net neutrality legislation.
I always thought they exist because privacy. Regular old DNS requests are not encrypted so even if you send a request to 9.9.9.9 your ISP can still see it.
Um, if you use their DNS they do. Some ISPs force that in fact.
Removed by mod
It became legal when the Trump administration got rid of net neutrality legislation.
This is why it is so important to get it back, but the current administration is dragging their feet.
Removed by mod
They do worse than block it, the redirect it to their own servers.
And the data is worth it at volume. They have hundreds of thousands of users, along with the region they are in, as well as data on what websites they visit.
Advertisers have and continue to pay for that data.
Removed by mod
How can the ISP force their dns? They can’t know where you got the destination ip from.
They could technically just drop and traffic over port 53 that is not destined to their own DNS servers. But that’s china level shit. I’ve never seen an ISP control this in North America.
They can also redirect that traffic to their own DNS servers, so you think you are using 3rd party DNS, when you are actually still using theirs. This became legal when the Trump administration got rid of net neutrality legislation.
OpenDNS has an article on how to test if your ISP is doing it. https://support.opendns.com/hc/en-us/articles/227988727-How-can-I-tell-if-my-ISP-Allows-Third-Party-DNS-Providers
That is where DNS over TLS and DNS over HTTPS come in. 🙂
Yes of course.
Never had an ISP firewall my DNS. Not sure what country you live in, but it sounds like China at that rate.
It’s usually ISP specific.
Some ISPs in the USA and Germany have been doing it. This is why DNS over HTTPs exists to bypass those blocks.
I always thought they exist because privacy. Regular old DNS requests are not encrypted so even if you send a request to 9.9.9.9 your ISP can still see it.