3 ms·
Does it submit every FQDN via DoH? So does Cloudflare see myspookybox.zeveb? Because if so then even that is an information leak.
by zeveb 7y ago
Does it submit every FQDN via DoH? So does Cloudflare see myspookybox.zeveb? Because if so then even that is an information leak.
- zeveb 7y agoIt's very frustrating to be constantly downvoted for saying that Firefox's DoH implementation leaks information without any of the downvoters saying why. Seriously, do you disagree that it leaks information? Do you agree that it does, but believe it is less problematic for two companies to have this information than having it sharded across all ISPs? Do you agree that it's more problematic but you don't care for some other reason? Do you agree that it's problematic and care but don't like how I express my point? Do you agree, care and like my expression but think it adds no value to HN? I can't learn if we don't discuss the issue.
- pbhjpbhj 7y agoPerhaps you could check with Wireshark for DoH traffic (ie https to Cloudflare) when resolving a local domain? (I agree with what you've said here, FYI)