3 ms·
There are several concerns that warrant good encryption. Privacy for instance if you surf even with encrypted dns you still leak the sites you query (SNI). Dep
by BlackLotus89 7y ago
There are several concerns that warrant good encryption.
Privacy for instance if you surf even with encrypted dns you still leak the sites you query (SNI). Depending in the traffic it can be known what kind of content you consume or even identify it explitly.
Also there is the case of broken encryption. We got our fair share of ssl/tls exploits. Also the traffic inside your network is mostly unsecured or can you issue certificates for your NAS? (yeah you can if you do it right but who does that?) Your media libraries or samba/nfs traffic is probably unencrypted. Got in home security cameras connected over wifi?
So yeah there are _plenty_ of reasons why you should have good security on your broadcast of your private data. Even if you got most of your lan in a VPN (which is a good practice tbh) your smart devices aren't probably in it.
- panarky 7y ago> even with encrypted dns you still leak the sites you query (SNI) DNS over HTTPS fixes this.
- abbeyj 7y agoI don't think it does. ESNI is the intended fix for this problem.
- aaomidi 7y agoNo it doesn't. SNI is still plaintext and has nothing to do with the DNS protocol. ESNI is the fix that's had a very slow rollout.
- krallja 7y agoSNI is part of the HTTPS protocol and is not related to host name resolution. You’re still vulnerable to it even if you are connecting to a host in your HOSTS file.
- rstupek 7y agoDNS over https doesn't fix SNI, only the newest tls 3.0 would fix that