4 ms·
There are gaps depending upon the client configuration, but "bupkis" is simply wrong or horribly obsolete. Encrypted DNS isn't an "any day now", basically ever
by llm_nerd 4mo ago
There are gaps depending upon the client configuration, but "bupkis" is simply wrong or horribly obsolete.
Encrypted DNS isn't an "any day now", basically every platform and browser and provider supports it, and 100% of my household's DNS requests are opaque to anyone watching the wire. And basically every system like Cloudflare supports ECH, so SNI isn't a thing for the vast majority of sites.
- marginalia_nu 4mo agoCloudflare is a massive MITM that has full access to your decrypted traffic. In light of the CLOUD Act, that's even worse than the problems with SNI.