3 ms·
DNSSEC - your isp will still have ip adresses, but won't know exact domain names
by duxet 9y ago
DNSSEC - your isp will still have ip adresses, but won't know exact domain names
- dannypgh 9y agoThat's not what DNSSEC is. DNSSEC is about signing the data in DNS, not encrypting it in transit. The same metadata analysis is possible.
- icebraining 9y agoAlso, if they can see your DNS, chances are they can see the TLS handshake, so SNI would leak the domain anyway. But a VPN should encrypt both.
- duxet 9y agoSorry, that's right, i was talking about DNSCrypt of course.