3 ms·
User will navigate to the site and show their own IP anyway. You achieved basically zero increase in privacy while making any competitor have problems with any
by adql 3y ago
User will navigate to the site and show their own IP anyway. You achieved basically zero increase in privacy while making any competitor have problems with any of their users that use 1.1.1.1
And any malicious client that tries to leak data via DNS can just ask for DNS record like my-ip-is-7.8.9.0.example.com and completely go around that privacy "enhancement".
Sorry but the "privacy" here looks like smokescreen to stifle competition.
- lolinder 3y agoThe concern isn't that the website will know the IP, it's that every single entity on the network between Cloudflare and the authoritative DNS server (most or all of which will not be operated by the website) will know it. It still may not be the right decision, but it's important to frame the trade-off correctly.
- sXgC6dwhMJMBvue 3y agoSo just don't send ECS on any query except once you get to the public-suffix's NS... Every element on the network between the user and the website will know it, too.