3 ms·

You can still set 1.1.1.1 as your DNS resolve in your DHCP server if you want to trust your ISP. If enough people switch to DoH (as would be needed for DoH by

by rocqua 7y ago

You can still set 1.1.1.1 as your DNS resolve in your DHCP server if you want to trust your ISP. If enough people switch to DoH (as would be needed for DoH by default to have a measurable effect) and the data is even slightly valuable, unscrupulous ISPs could still use SNI, or even just reverse IP lookups to track your movements.

ti_ranger 7y ago
> You can still set 1.1.1.1 as your DNS resolve in your DHCP server if you want to trust your ISP. It's not that I necessarily trust my ISP, I don't want to be forced to also trust Cloudflare (both for privacy and availability). So no, I don't use 1.1.1.1, I run my own recursive name server.
- rocqua 7y ago
  That also works for avoiding your ISP serving your DNS requests.
  - chopin 7y ago
    I also run my own recursive resolver but this doesn't prevent snooping by the ISP as the recursive requests go through its network.