3 ms·

This doesn’t make any sense. Your ISP still knows your browsing history even if they can’t see your DNS requests.

• perfmode 7y ago
  how? wouldn’t they just see TCP packets?
  • derefr 7y ago
    They see the destinations of those packets, so they know what sites (IP addresses) you're interacting with, on what ports. They don't get the domain names, but for the very popular web properties that all these analytics care about calculating your relationship to, they don't need them; the IP is enough to discern which site you're visiting.
  • GauntletWizard 7y ago
    Yes, and the IP addresses there are public, and reverse DNS entries are easy to find. There's some ambiguity, but not much. Your isp doesn't care about the difference between fbcdn.net and Facebook.com when selling your traffic history.
• nathanaldensr 7y ago
  Not if your traffic is HTTPS+TLS. They will only know--if they are the target DNS server--what IP you are connecting to. The secure channel protects against them knowing more than that.
  • ianlevesque 7y ago
    SNI leaks the domain name you are requesting. It's pretty shocking.
    • cesarb 7y ago
      There is already work on encrypted SNI. Last time I looked, it uses information from DNS, so encrypted DNS is a prerequisite.
    • snek 7y ago
      Firefox also supports ESNI! These crazy villians shakes fist at Mozilla
• nullwasamistake 7y ago
  No they don't. TLS has encrypted sites for a long time. And with encrypted SNI they get no info about browsing history. This is a blatant attempt to stymie the last cleartext protocol that can be used to record browsing history.