4 ms·
Yep that’s exactly how it works. Not all ISPs actively intercept and reply to your queries, but the rest still monitor all port 53 traffic and log your queries.
by NavinF 4y ago
Yep that’s exactly how it works. Not all ISPs actively intercept and reply to your queries, but the rest still monitor all port 53 traffic and log your queries.
Naturally, a lot of HNers hate encrypted DoH which solves both the active MITM and passive monitoring problems. Example: https://news.ycombinator.com/item?id=25344358 https://news.ycombinator.com/item?id=25344358
- topranks 4y agoIt’s 100% not true that all ISPs monitor DNS packets. I’ve worked for several who didn’t. Of course all have the ability to do just that so as a user you can’t tell. If you’re in the EU they can’t sell that data at least.
- folmar 4y agoWe just prefer the small local ISP monitoring our queries to Google and Cloudflare doing so, as the ISP does not learn a lot more than already at hand - they know the IPs I connect to anyway.