8 ms·
What exactly is the privacy threat model in this situation? If you are about to connect to the resolved service it makes no difference that you hid your subnet
by ebikelaw 9y ago
What exactly is the privacy threat model in this situation? If you are about to connect to the resolved service it makes no difference that you hid your subnet from that service’s DNS server.
- jvolkman 9y agoWhat if a client blackholes all traffic to some network due to some privacy-related reason? If cloudflare tells that provider (via name resolution) who's resolving names, some of that client's PII is possibly shared before the blackhole decision can even be made.
- ebikelaw 9y agoThat seems a bit contrived but just rolling with it, this hypothetical org with ultra-sensitive opsec should have also blacklisted the domain in question at their inside resolver.