3 ms·
> The last trace is unencrypted domain name in TLS handshake and it'll be gone soon. How can they respond to dns queries if they don't know what you're asking
by j88439h84 7y ago
> The last trace is unencrypted domain name in TLS handshake and it'll be gone soon.
How can they respond to dns queries if they don't know what you're asking for?
- computerex 7y agoI think you could potentially use a DNS independent of the ISP? But ultimately the ISP will know what IP you're trying to reach due to the nature of their position.
- vbezhenar 7y agoI can use https://1.1.1.1/ https://1.1.1.1/ as my DNS resolver. So all my provider can see is encrypted connection to 1.1.1.1 then encrypted connection to some 1.2.3.4 which belongs to cloudflare and serves plenty of different websites.