3 ms·
I posted the article Centralised DoH is bad for Privacy, in 2019 and beyond to HN nearly a week ago [1]. Here’s the money quote: DNS over HTTPS however neatly
by alwillis 7y ago
I posted the article Centralised DoH is bad for Privacy, in 2019 and beyond to HN nearly a week ago [1].
Here’s the money quote:
DNS over HTTPS however neatly separates out each device (and even each individual application on that device) to a separate query stream. This alone is worrying, as we now have individual users’ queries, but the TLS that underlies HTTPS also typically uses TLS Resumption which offers even further tracking capabilities.
[1]: https://news.ycombinator.com/item?id=22362864 https://news.ycombinator.com/item?id=22362864
- comex 7y agoYes, in the hypothetical case that some agency is compelling CloudFlare (and/or NextDNS) to provide ongoing real-time decryption, which would be somewhat unprecedented: not entirely dissimilar to things which have been publicly reported before, but not the same either. In the more likely case that that isn't happening, you make those agencies' lives a lot harder.