3 ms·
> even with encrypted dns you still leak the sites you query (SNI) DNS over HTTPS fixes this.
by panarky 7y ago
> even with encrypted dns you still leak the sites you query (SNI)
DNS over HTTPS fixes this.
- abbeyj 7y agoI don't think it does. ESNI is the intended fix for this problem.
- aaomidi 7y agoNo it doesn't. SNI is still plaintext and has nothing to do with the DNS protocol. ESNI is the fix that's had a very slow rollout.
- krallja 7y agoSNI is part of the HTTPS protocol and is not related to host name resolution. You’re still vulnerable to it even if you are connecting to a host in your HOSTS file.
- rstupek 7y agoDNS over https doesn't fix SNI, only the newest tls 3.0 would fix that