58 ms·

I don't care if my ISP knows I visit reddit.com. I do care if they know I visit reddit.com/r/something I'm already protected by TLS for the latter. Newer TLS

I don't care if my ISP knows I visit reddit.com. I do care if they know I visit reddit.com/r/something I'm already protected by TLS for the latter. Newer TLS will eventually protect me from the former (in combination with DNS encryption).

mike-cardwell 7y ago
> I'm already protected by TLS for the latter. True > Newer TLS will eventually protect me from the former (in combination with DNS encryption). False. Your ISP will see a port 443 connection to 151.101.121.140 and then lookup that IP in whichever of the numerous IP->Website DB's they're using and discover you visited Reddit. DoH didn't hide from your ISP that you visited Reddit. It just added Cloudflare to the list of orgs that know about it. Potential fix: Centralise HTTP behind a handful of shared IP addresses so the IP->Website mapping isn't so easy. Did somebody say Cloudflare?