12 ms·
Personally my main motivation is I don't want anyone to snoop what sites I visit and then sell that data, my ISP included, but there are other issues too. To qu
by Etheryte 3y ago
Personally my main motivation is I don't want anyone to snoop what sites I visit and then sell that data, my ISP included, but there are other issues too. To quote Cloudflare [0]:
> Queries could be directed to a resolver that performs DNS hijacking. For example, in the UK, Virgin Media and BT return a fake response for domains that do not exist, redirecting users to a search page. This redirection is possible because the computer/phone blindly trusts the DNS resolver that was advertised using DHCP by the ISP-provided gateway router.
[0] https://blog.cloudflare.com/dns-encryption-explained/ https://blog.cloudflare.com/dns-encryption-explained/
- _Algernon_ 3y agoCant your ISP reverse lookup the IPs you connect to based on your IP headers anyways?
- jrockway 3y agoThey can, but pretty much everything will reverse lookup to Cloudflare or AWS.
- gruez 3y agoSNI reveals the exact site though
- mmwelt 3y agoAs I understand it, this is now being addressed by ESNI[1] and ECH[2]. Hopefully ECH will continue being more widely deployed. [1] https://www.cloudflare.com/learning/ssl/what-is-encrypted-sni/ https://www.cloudflare.com/learning/ssl/what-is-encrypted-sn... [2] https://blog.cloudflare.com/encrypted-client-hello/ https://blog.cloudflare.com/encrypted-client-hello/
- fullspectrumdev 3y agoRather amusingly, the massive centralisation of the internet, which is bad for privacy in every other way, actually protects you here.
- eddd-ddde 3y agoYep, cloudflare dns proxy essentially hides your origin ip addresses.