7 ms·
Due to the previously mentioned problem with session resumption your DoH resolvers now know what non-vpn ips you use as well as any vpn ones. This is a catastro
by nieve 7y ago
Due to the previously mentioned problem with session resumption your DoH resolvers now know what non-vpn ips you use as well as any vpn ones. This is a catastrophic failure mode if the DoH resolver is hostile - for example you might have just successfully linked home, work, and vpn ips to the same browser. Even if you only ever use different VPN endpoints it won't protect you, in fact if they're using timing information to try to narrow your location it's extra information about network distances tied to that convenient unique, persistent id.