4 ms·
If you are going to do this approach, make sure that your ISP's router/modem is not on the same network. I.e. you should be running your own network, then have
by CydeWeys 7y ago
If you are going to do this approach, make sure that your ISP's router/modem is not on the same network. I.e. you should be running your own network, then have it connect to the outside world through the Pi-hole which is the only device that is connected to the ISP-controlled hardware.
Otherwise, their hardware could just be reading everything and reporting home on it, since it'd be able to see the unencrypted DNS requests that are sent over its network to the Pi-hole.
- iforgotpassword 7y agoThis is actually what my network looks like but I'm curious if we know of any ISP doing this. They would basically have to sniff on the bridge between Wi-Fi and wired, or even on the switch if both ends are wired. I'm usually rather pessimistic but that seems rather involved instead of "just" spying on all the non tech-savvy users using the default DNS settings which should make up 99% of your user base.