Comment

IHawkMike@lemmy.world ⁨1⁩ ⁨week⁩ ago

So now your ISP sees all of your queries instead of CF. (Assuming the cloudflared option is using DoH)

I’ll trust Cloudflare over Comcast/AT&T/etc. any day of the week.

Sort:hotnew top

MigratingtoLemmy@lemmy.world ⁨6⁩ ⁨days⁩ ago
You might want to study more about SNI. Your ISP knows anyway

source
- IHawkMike@lemmy.world ⁨5⁩ ⁨days⁩ ago
  I know plenty account SNI already, but thanks. You might want to study more yourself, since we’re being condescending.
  
  blog.cloudflare.com/encrypted-sni/
  
  source
  - MigratingtoLemmy@lemmy.world ⁨5⁩ ⁨days⁩ ago
    Well, running your own DNS server will also give you eSNI. And Cloudflare still doesn’t know anything
    
    source
maxwellfire@lemmy.world ⁨1⁩ ⁨week⁩ ago
Your ISP knows where you’re going anyway. They don’t need DNS for that. They see all the traffic.

source
girsaysdoom@sh.itjust.works ⁨1⁩ ⁨week⁩ ago
It looks like Quad9 supports DoH: quad9

source
MigratingtoLemmy@lemmy.world ⁨1⁩ ⁨week⁩ ago
You can run a VPN and tunnel your outbound DNS queries over that. Heck, you could tunnel your DNS queries over TOR

source