> ICRs can include that you visited Wired.com but not that you read this individual article So obviously it's just DNS records they look at, unless they look a

> ICRs can include that you visited Wired.com but not that you read this individual article So obviously it's just DNS records they look at, unless they look at other metadata? I know that DoH encrypts your DNS queries, but still leaks the site you're visiting via the TLS handshake. There are further developments in this space which mitigate this weakspot, namely ECH[0] and Oblivious DoH[1]. Combine a VPN that you trust with these and you've essentially gone dark to this sort of surveillance apparatus. [0] https://blog.cloudflare.com/encrypted-client-hello/ https://blog.cloudflare.com/encrypted-client-hello/ [1] https://blog.cloudflare.com/oblivious-dns/ https://blog.cloudflare.com/oblivious-dns/