3 ms·
They know what IPs you are connecting to and when, which is valuable. If Cloudflare serves the site you are connecting to (which is increasingly more common) th
by rjh29 4y ago
They know what IPs you are connecting to and when, which is valuable. If Cloudflare serves the site you are connecting to (which is increasingly more common) they have access to all of the data you are transmitting.
- avg_dev 4y agoSomehow I thought they meant more. I’m sure my ISP is after all of my data but I’d rather them than CF. Upon rereading their claim I suspect it is just about IPs and hostnames. I can live with that. Also my browser uses DoH.
- password4321 4y agoYes, even the router given by my ISP offers Parental Controls with keyword matching against host name, thanks to SNI. https://en.wikipedia.org/wiki/Server_Name_Indication https://en.wikipedia.org/wiki/Server_Name_Indication > The desired hostname is not encrypted in the original SNI extension, so an eavesdropper can see which site is being requested.
- majou 4y agoSNI reveals which domains.
- rjh29 4y agoECH (encrypted client hello) is going to become mainstream pretty soon. But if you're doing something dodgy, hostname vs. IP is unlikely to make a difference anyway.