You can't wiretap the DNS and obtain data about all site visits from there. That's really quite nice. It still means that your ISP or a wiretap on your own int

You can't wiretap the DNS and obtain data about all site visits from there. That's really quite nice. It still means that your ISP or a wiretap on your own internet pipe can check your browsing activity by monitoring SNI's, but then again, they can also figure that out for a lot of sites by just checking the IP. Then you could argue that all sites should use CDNs to hide this, but then you open the argument of whether the internet should be centralized or decentralized. Encrypted SNI would be nice, but are tricky (wouldn't work well in multi-tenant setups), and those that can sniff the SNI probably know where you were going anyway.