News for hackers. Stuff that matters.

A comment on DNSCrypt – A protocol to improve DNS security. Parent comment

Re:DNSCrypt – A protocol to improve DNS security by ac29 on Wednesday March 29, 2017 @11:59PM (#13992764)
>Meh, if an attacker can sniff your packets, they can already tell what IP addresses you're talking to, which certainly narrows down which domain names you're talking to.

Honest question: with an increasing amount of sites being hosted via cloud infrastructure, does an IP really let you know if you are talking to Amazon, Google, or Microsoft vs the multitude of sites hosted by AWS, GCP, or Azure?

I'm assuming they use their own infrastructure, but I could be wrong.

[ Parent | on HN ]
Re:DNSCrypt – A protocol to improve DNS security by Buge on Thursday March 30, 2017 @01:43AM (#13993217)
IPs don't matter. SNI tells eavesdroppers the exact domain you are talking to.
[ Parent | on HN ]
Re:DNSCrypt – A protocol to improve DNS security by Tepix on Thursday March 30, 2017 @05:06AM (#13993905)
Hopefully we will get Encrypted SNI with TLS 1.3

https://www.ietf.org/proceedings/94/slides/slides-94-tls-8.p...

[ Parent | on HN ]
Re:DNSCrypt – A protocol to improve DNS security by minitech on Thursday March 30, 2017 @12:42AM (#13992962)
Yes, VPS services will still assign your instance an IP address of its own.
[ Parent | on HN ]