4 ms·

A middle option, and one that I use, is to run DNS-over-HTTPS on my pi-hole machine to tunnel DNS out. Without DNS information the local ISP can tell a lot less

by api 2y ago

A middle option, and one that I use, is to run DNS-over-HTTPS on my pi-hole machine to tunnel DNS out. Without DNS information the local ISP can tell a lot less about the sites I'm visiting, since many sites are behind the same CDN IP pools.

div72 2y ago
Except TLS-SNI sends the hostnames in plaintext during the handshake and you can't disable it in at least Firefox AFAIK.
- andix 2y ago
  SNI over ESNI seems to be still the standard. I was not aware of that. https://esnicheck.com/ https://esnicheck.com/