7 ms·
This has been known forever, and it doesn't only affect websites. DNS over TLS has the same issue, and effectively gives more information to DNS providers than
by jedisct1 8y ago
This has been known forever, and it doesn't only affect websites. DNS over TLS has the same issue, and effectively gives more information to DNS providers than regular DNS.
Which is why dnscrypt-proxy can disable session resumption for DoH, or can use a new key for each transaction when using the dnscrypt protocol.
(Intra won't allow disabling it because apparently, users are idiots https://github.com/Jigsaw-Code/Intra/issues/101 https://github.com/Jigsaw-Code/Intra/issues/101 )