4 ms·

DoH itself is fine. But to win against “surveillance” you need to make a smart, conscious decision about who you want to give your browsing history to. For me

DoH itself is fine. But to win against “surveillance” you need to make a smart, conscious decision about who you want to give your browsing history to. For me, I’d rather my ISP sees my DNS, than all that data is sent to some American mega-corp keen to hoover up every last datapoint about me they can. My ISP can for the most part look at HTTPS SNI field and see all the domains I access anyway. So switching to say, Google DoH, only means that now Google have that list as well as my ISP.

josephcsible 5y ago
> some American mega-corp keen to hoover up every last datapoint about me they can That's a really good description of both Comcast and Verizon. Not so much of Cloudflare though - they seem to actually care about people's privacy. > My ISP can for the most part look at HTTPS SNI field and see all the domains I access anyway. So switching to say, Google DoH, only means that now Google have that list as well as my ISP. Isn't this just an argument to hurry up and get eSNI/ECH rolled out everywhere?
- topranks 5y ago
  Absolutely reason to promote ECH. Sure Cloudflare are better than those other big US ISPs. But for those of us in the EU, where such practices are illegal, we may want to think twice about giving our data to Cloudflare (who are subject to requests from US govt for instance.)
  - josephcsible 5y ago
    Even in the EU, couldn't there still be a privacy benefit? Set aside for a minute what's legal and illegal, and just consider what entities are capable and incapable of. By using a DoH provider (that sees what domains your client IP is looking up) other than your ISP (that knows that your client IP goes with your real-life identity), there's now no single entity capable of associating your real-life identity with which domains you've looked up.

4 ms·

DoH itself is fine. But to win against “surveillance” you need to make a smart, conscious decision about who you want to give your browsing history to. For me

by topranks 5y ago

josephcsible 5y ago
> some American mega-corp keen to hoover up every last datapoint about me they can That's a really good description of both Comcast and Verizon. Not so much of Cloudflare though - they seem to actually care about people's privacy. > My ISP can for the most part look at HTTPS SNI field and see all the domains I access anyway. So switching to say, Google DoH, only means that now Google have that list as well as my ISP. Isn't this just an argument to hurry up and get eSNI/ECH rolled out everywhere?
- topranks 5y ago
  Absolutely reason to promote ECH. Sure Cloudflare are better than those other big US ISPs. But for those of us in the EU, where such practices are illegal, we may want to think twice about giving our data to Cloudflare (who are subject to requests from US govt for instance.)
  - josephcsible 5y ago
    Even in the EU, couldn't there still be a privacy benefit? Set aside for a minute what's legal and illegal, and just consider what entities are capable and incapable of. By using a DoH provider (that sees what domains your client IP is looking up) other than your ISP (that knows that your client IP goes with your real-life identity), there's now no single entity capable of associating your real-life identity with which domains you've looked up.