3 ms·

What browsers and how many sites are currently using eSNI by default? My understanding is that is a thing only in limited concept. The RFC [1] is still an act

What browsers and how many sites are currently using eSNI by default? My understanding is that is a thing only in limited concept. The RFC [1] is still an active draft. Why is Cloudflare more trustworthy with my browsing habits? I have no contract with them and no agreements on what they may do with my internet activity. I have no contract stating how the data is to be used, how long it is to be kept or whom it may be shared with or sold to. For all I know they could sell that data right back to Comcast. Or worse, they could feed it into a ML training program for a social credit system for future use. [1] - https://datatracker.ietf.org/doc/draft-ietf-tls-esni/ https://datatracker.ietf.org/doc/draft-ietf-tls-esni/

josephcsible 4y ago
> What browsers and how many sites are currently using eSNI by default? It's not widely rolled out yet, but it exists and it will be in the future. > Why is Cloudflare more trustworthy with my browsing habits? Because of a comparison of Cloudflare's and Comcast's past track record of privacy-related matters.
- LinuxBender 4y ago
  I suppose my personal experience varies from that a bit. I agree Comcast has a horribly shady past abusing their customers. Cloudflare's origins are lesser known, likely even to those currently working for them. That doesn't really matter for this purpose I suppose. Former volunteer for their previous honeypot project In the end, I have no contracts with anyone stating how my data may be (ab)used or how long it will exist. So instead of one company potentially abusing my data, now it is two. There is really no way around that other than to not participate. My personal preference is to assume the Only Two Rules. [1] In full disclosure, I use neither of those services for DNS but my I would not expect non-HN people to use my convoluted process combining open source VPN meshes, dozens of unbound caches and dozens on many VPS providers that talk to upstream DoT resolvers with cron jobs that pre-cache thousands of domains in random orders using "shuf" that I do not visit and dozens that I do visit and unbound configured to both override min-ttl and to hold onto 0-ttl records until requested again and running the same cron jobs on my home firewalls that talk to those VPS nodes over DoT and Tinc. [1] - https://www.youtube.com/watch?v=Wxi-IUnCN_8 https://www.youtube.com/watch?v=Wxi-IUnCN_8 [video]

josephcsible 4y ago

> What browsers and how many sites are currently using eSNI by default? It's not widely rolled out yet, but it exists and it will be in the future. > Why is Cloudflare more trustworthy with my browsing habits? Because of a comparison of Cloudflare's and Comcast's past track record of privacy-related matters.

LinuxBender 4y ago
I suppose my personal experience varies from that a bit. I agree Comcast has a horribly shady past abusing their customers. Cloudflare's origins are lesser known, likely even to those currently working for them. That doesn't really matter for this purpose I suppose. Former volunteer for their previous honeypot project In the end, I have no contracts with anyone stating how my data may be (ab)used or how long it will exist. So instead of one company potentially abusing my data, now it is two. There is really no way around that other than to not participate. My personal preference is to assume the Only Two Rules. [1] In full disclosure, I use neither of those services for DNS but my I would not expect non-HN people to use my convoluted process combining open source VPN meshes, dozens of unbound caches and dozens on many VPS providers that talk to upstream DoT resolvers with cron jobs that pre-cache thousands of domains in random orders using "shuf" that I do not visit and dozens that I do visit and unbound configured to both override min-ttl and to hold onto 0-ttl records until requested again and running the same cron jobs on my home firewalls that talk to those VPS nodes over DoT and Tinc. [1] - https://www.youtube.com/watch?v=Wxi-IUnCN_8 https://www.youtube.com/watch?v=Wxi-IUnCN_8 [video]