3 ms·

>Now, Comcast and Mozilla come to some sort of agreement which effectively restores Comcast's access to their customer's DNS traffic? They could (and can) do t

by gsich 6y ago

>Now, Comcast and Mozilla come to some sort of agreement which effectively restores Comcast's access to their customer's DNS traffic? They could (and can) do that regardless of DNS. Most websites and other services are uniquely identifiable by their IP(-range). Encrypted SNI is still a draft so not applicable here.

pabs3 6y ago
> Most websites and other services are uniquely identifiable by their IP(-range). You are very correct about that: "What can you learn from an IP?" https://irtf.org/anrw/2019/slides-anrw19-final44.pdf https://irtf.org/anrw/2019/slides-anrw19-final44.pdf Basically Encrypted Client Hello (the new name for eSNI) and DoH/DoT are only useful for websites hosted on global CDN providers like Akamai, Cloudflare and so on.