3 ms·
I still prefer DoH giving "exclusive" access to resolvers, because the alternative is sending that data in plaintext for everyone along the path to read?
by sp332 6y ago
I still prefer DoH giving "exclusive" access to resolvers, because the alternative is sending that data in plaintext for everyone along the path to read?
- folmar 6y agoIf your ISP is large enough it is only sent to ISP's name server which probably has everything you need cached, and if it isn't it might blend in with other queries. And your ISP can sniff SNI or guess target domains from target IPs already.
- judge2020 6y agoWhich is also being worked on via esni (now ECH for encrypted client hello) - https://crbug.com/boringssl/275 https://crbug.com/boringssl/275