4 ms·

You might already know this, but in case you don't: they can still see the domain names you visit in plain text because of TLS SNI: https://en.wikipedia.org/wik

by mdeeks 8y ago

You might already know this, but in case you don't: they can still see the domain names you visit in plain text because of TLS SNI: https://en.wikipedia.org/wiki/Server_Name_Indication https://en.wikipedia.org/wiki/Server_Name_Indication Encrypted SNI is a thing on the horizon that'll let us give the dual middle finger to our ISPs. As far as I know, it is not here now though.

newman314 8y ago
There’s an open request to add ESNI support to cloudflared
gmac 8y ago
A way round this, of course, is a VPN. Which is also a handy way of using an ad-blocking DNS service everywhere. My setup is documented here: https://github.com/jawj/ikev2-setup https://github.com/jawj/ikev2-setup