6 ms·
ISPs can and do sell your information, and can also be served a warrant or NSL. Cloudflare, by contract, is prohibited from doing the former, which is a net imp
by JoshTriplett 7y ago
ISPs can and do sell your information, and can also be served a warrant or NSL. Cloudflare, by contract, is prohibited from doing the former, which is a net improvement even if they're still subject to the latter.
It's an incremental improvement, but a positive one.
I would certainly love to see an even better protocol for Internet name resolution that prevents anyone from having name-lookup information, but in the meantime, DoH seems like a huge step forward in ensuring that no unencrypted traffic is visible to the ISP or local network.
- nullc 7y agoYour ISP, however, is not prevented from collecting and selling your data by DoH. So the addition of default DoH in cloudflare adds an extra party that can intercept your traffic but does not remove any. > DoH seems like a huge step forward in ensuring that no unencrypted traffic is visible to the ISP or local network It does not do this.
- growse 7y agoDNS traffic is a much richer and more valuable resource than a simple list of IP sessions. Yes, of course your ISP can see who you're connecting to and sell that, but denying them (and anyone else) the ability to collect all DNS traffic is better than not denying that.
- nullc 7y agoDoH is significantly richer than DNS itself because of session reuse. DNS is cached, other than potential ambiguity related to shared hosts (which can be resolved by looking at SNI)-- I'm failing to see how DNS is richer than the traffic itself. Less costly to monitor? Sure.
- rtsil 7y ago> ISPs can and do sell your information Not in my country, they'll be massively fined if they're caught doing that.
- growse 7y agoMozilla is only enabling DoH through Cloudflare by default in the US.