4 ms·
> For example, if you configure your system to use Cloudflare's DoH service and visit a Cloudflare-hosted site over HTTPS, such as El Reg, your ISP will only se
by lgats 7y ago
> For example, if you configure your system to use Cloudflare's DoH service and visit a Cloudflare-hosted site over HTTPS, such as El Reg, your ISP will only see outbound connections to Cloudflare and have no idea what exactly you're leafing through: in this case, The Reg.
Doesn't the "HOST" field of the HTTPS negotiation give this data away to the ISP anyways?
- slap 7y ago"Host:" is on the HTTP layer so it's also encapsulated inside HTTPS so...it's invisible from any sniffing attempt.
- codedokode 7y agoIf you use ESNI (that encrypts SNI field in SSL handshake) and the server uses ESNI, and you both use TLS 1.3 (that encrypts server certificate) then it is difficult to determine domain name. Latest Firefox supports both of there features, as well as DoH.