4 ms·
Then call your ISP! They are tracking them, too!
by dimitrios1 5y ago
Then call your ISP! They are tracking them, too!
- input_sh 5y agoOkay? Does that mean my search engine should do that too? Two wrongs don't make a right.
- dimitrios1 5y agoSorry, my wording insinuates it's an either or. I meant to point out this is a war that needs to be fought on multiple fronts, and arguably your ISP has the better data (with the worse IT security, to boot)
- fsckboy 5y agoyou just told your free search engine all the different variations on the search strings you're looking for, basically all what is on your mind, and you've chosen your search engine based on the quality of the search they provide, and now you don't want them to know which result you chose? I'd argue that it's the one piece of information they are most entitled to in the tit-for-tat, you help me and I'll help you arrangement you two have.
- vikingerik 5y agoEven through HTTPS? They'll have the domain and IP address and transfer size, but not the URL or contents of the traffic. (Unless they managed to MITM a trusted certificate somehow.)
- dimitrios1 5y agoHTTPS encrypts the host? Thought you had to know where to go to open that secure transmission. It's enough for your ISP to know you went to "pornhub.com" for example.
- kevin_thibedeau 5y agoThey won't know when you use an alt DNS or DoH.
- pritambaral 5y agoYou'll also need ECH, to avoid leaking your TLS handshake's SNI.
- greenyoda 5y agoYour ISP needs to know the IP address of the site to route your TCP packets there, and they can easily do a reverse DNS lookup[1] on it. So hiding your DNS query from them won't prevent them from knowing what site you visited. [1] https://en.wikipedia.org/wiki/Reverse_DNS_lookup https://en.wikipedia.org/wiki/Reverse_DNS_lookup
- dimitrios1 5y agoExactly. At the end of the day, computers need a public address to find each other. And if you can find it, so can they.
- sk5t 5y agoYeah, despite ESNI and DNS-over-HTTPS it's likely an ISP could still effectively track usage of certain large-ish sites by IP address alone. Compare against the anonymity inherent in accessing s3.amazonaws.com/some-bucket/some-path.