4 ms·
I was wondering the same thing. How would my ISP even know that I am using a site like z-library if everything is over HTTPS?
by irrational 4y ago
I was wondering the same thing. How would my ISP even know that I am using a site like z-library if everything is over HTTPS?
- devmor 4y agoDNS for one, if you're using theirs.
- Laaas 4y agoHost names are commonly unencrypted. See [0]. IP addresses also tell a lot. They can check what domain names map to that IP address. [0]: https://www.cloudflare.com/learning/ssl/what-is-encrypted-sni/ https://www.cloudflare.com/learning/ssl/what-is-encrypted-sn...
- Ekaros 4y agoIP addresses? DNS queries? Later if you either use ISP provided DNS servers or unencrypted DNS. You can identify host from queries and IPs and then match it to TLS connection.
- SV_BubbleTime 4y agoThey still likely get your DNS info, and also they know you are connected to x ip address which is likely y service. All HTTPS does is make sure they can’t see what you are transferring. There is still meta data to whom. Why do you think google runs 8.8.8.8? It’s not out of kindness.
- ed_mercer 4y agoDo I care that can see metadata? If they don’t know what was transferred, how is that useful to them? Data-mining?
- rafael09ed 4y agoBecause the base URL isn't encrypted. The packet still needs to be able to be routed
- ivann 4y agoBy looking at the SNI [0] if the connection does not use TLS 1.3 and ESNI. [0] https://en.wikipedia.org/wiki/Server_Name_Indication https://en.wikipedia.org/wiki/Server_Name_Indication