3 ms·
> And your ISP knows where you connect to anyways. So the data or information generated by their DNS server provides no additional information to them. This is
by petters 8y ago
> And your ISP knows where you connect to anyways. So the data or information generated by their DNS server provides no additional information to them.
This is not correct. Your ISP only knows what IP you are connecting to and that is not enough in general. E.g. Cloudflare.
- currysausage 8y agoThat might be true in the future if and when SNI encryption is widely implemented.
- claudius 8y agoand the internet becomes sufficiently centralised that you only access a few IP addresses behind which most services are hosted. In other words, we can either a) trust our ISP with DNS queries and IP addresses which fairly uniquely identify services or b) trust Cloudflare with DNS queries and our ISP with IP addresses which fairly uniquely identify services or c) move everything "behind Cloudflare" and solely trust Cloudflare Given that I can cancel my ISP’s contract, I can hold them accountable if they spew my data into the internet and I have no idea who Cloudflare is or what their aims are, I’d much prefer a) over c). b) is just worse than a) or c).
- sofaofthedamned 8y agoWith SNI they also know the domain you're connecting to.
- pas 8y agoThere are people working on encrypted SNI: https://huitema.wordpress.com/2017/09/12/cracking-the-sni-encryption-nut/ https://huitema.wordpress.com/2017/09/12/cracking-the-sni-en... it'll take some time, but we'll get there hopefull soon.
- sofaofthedamned 8y agoGood point, but it's not here now. It is however better than the old days where you needed your own IP address to do TLS/HTTPS.