3 ms·
"There's no point in securing DNS because your ISP can see what IP addresses you connect to." Perhaps the ISP has fingerprinted the pages of every website on e
by textmode 8y ago
"There's no point in securing DNS because your ISP can see what IP addresses you connect to."
Perhaps the ISP has fingerprinted the pages of every website on every shared IP address so they can easily determine which website the user is visiting? Why rely on unencrypted DNS or unencrypted SNI when it is so trivial to map IP addresses to domains.
A poor example, but consider this single IP address 216.239.36.21 with a reverse lookup returning a 23M list of 1,283,151 domains.
https://api.hackertarget.com/reverseiplookup/?q=216.239.36.21 https://api.hackertarget.com/reverseiplookup/?q=216.239.36.2...