4 ms·
"Your ISP is literally selling this information right now in the US" Your ISP will literally still be able to sell this information after DoH is rolled out. Be
by mike-cardwell 7y ago
"Your ISP is literally selling this information right now in the US"
Your ISP will literally still be able to sell this information after DoH is rolled out. Because they can see what IPs you're connecting to and in most cases hostnames can be trivially and automatically determined knowing only the IP.
Unless we centralise HTTP through a handful of gateways like we're doing with DNS (hello Cloudflare). At which point, why even bother calling it the web anymore.
- badrabbit 7y agoVery limited with TLS. With webhosts, the PTR record means little. CDNs also obfuscate your destination. Shared hosting sites only care about the host field in the encrypted HTTP as well. Especially given the oversaturation of IPv4. Keep in mind, it's not just what you visit but how often as well and a lot other details (dns is cached)
- gioele 7y ago> Very limited with TLS. With webhosts, the PTR record means little. TLS+SNI sends the `Host` you are connecting to in plain text. eSNI is not yet widely deployed. Centralizing DNS without centralizing HTTP (e.g. domain fronting) does not solve the leak of connection metadata.