3 ms·
It bypasses the DNS requests, yes (which is what I'm doing with PiHole over VPN already). But later when your browser actually connects to the IP address PiHol
by gigel82 5y ago
It bypasses the DNS requests, yes (which is what I'm doing with PiHole over VPN already).
But later when your browser actually connects to the IP address PiHole DNS gave it, it will send the domain name in plain-text (look up SNI and the proposed fix to that, ESNI).
- egberts1 5y agoFeh
- LinuxBender 5y agoIn this particular case, use the VPN or ssh forwarding to route your web traffic out of a VM or rented server. Then 100% of your traffic is invisible to your ISP. If using an open source VPN like tinc [1] that does user-space dynamic mesh routing you can even route out of a different node than the one you are talking to making correlation attacks less easy. This can also be done with multiple ssh forwarding tunnels. SSH tunnels should work from your PiHole. [1] - https://www.tinc-vpn.org/ https://www.tinc-vpn.org/