• 0 Posts
  • 4 Comments
Joined 1 year ago
cake
Cake day: June 26th, 2023

help-circle

  • DNS over TLS won’t save you thanks to SNI. As there is a huge shortage of IPV4 addresses, same IP addresses serve multiple hostnames, and to provide a working encryption, TLS handshake includes the requested hostname in plain text so that SNI can be used to determine which certificate should be used. That plaintext hostname is something your ISP can easily log.

    Rule of thumb is, Https does not provide anonymity, only encryption.