News for hackers. Stuff that matters.

A comment on Ask HN: What are good ways to hide metadata from your ISP?. Parent comment

Re:Ask HN: What are good ways to hide metadata from your ISP? by dannypgh on Thursday June 15, 2017 @08:56AM (#14559923)
That's not what DNSSEC is. DNSSEC is about signing the data in DNS, not encrypting it in transit. The same metadata analysis is possible.
[ Parent | on HN ]
Re:Ask HN: What are good ways to hide metadata from your ISP? by icebraining on Thursday June 15, 2017 @09:07AM (#14559990)
Also, if they can see your DNS, chances are they can see the TLS handshake, so SNI would leak the domain anyway. But a VPN should encrypt both.
[ Parent | on HN ]
Re:Ask HN: What are good ways to hide metadata from your ISP? by duxet on Thursday June 15, 2017 @12:43PM (#14562002)
Sorry, that's right, i was talking about DNSCrypt of course.
[ Parent | on HN ]