How to keep your ISP’s nose out of your browser history with encrypted DNS

Re:How to keep your ISP’s nose out of your browser history w... by vbezhenar on Sunday April 08, 2018 @05:36PM (#16788575)

Buy VPS and install your own VPN. It's much harder to spy on you in this setup and basically requires complicated targeted attack. I'm not sure if common networking setups for VPS record TCP connections, if they do, then VPS provider can record some important metainformation, but it's still not a lot. On the other side with VPN it's much easier to spy on every client.

[ Parent | on HN ]

Re:How to keep your ISP’s nose out of your browser history w... by woofcat on Sunday April 08, 2018 @05:59PM (#16788705)

Sure, however any warrant can get billing data from your hosting provider, or your credit card company will resolve directly to you.

[ Parent | on HN ]

Re:How to keep your ISP’s nose out of your browser history w... by floatboth on Sunday April 08, 2018 @07:05PM (#16789025)

But if your VPS is in a country that's not very friendly to your country, getting data from the hosting provider won't be easy.

[ Parent | on HN ]

Re:How to keep your ISP’s nose out of your browser history w... by Cacti on Sunday April 08, 2018 @08:39PM (#16789399)

I mean, if you’re trying to defend against a coordinate government attack, you’re boned anyway. They’ll just break into your house and install a sniffer, or arrest you, or make your life hell.

That’s assuming they can’t just get into your home network through zero days, which an individual has no practical defense against.

[ Parent | on HN ]

Re:How to keep your ISP’s nose out of your browser history w... by woofcat on Sunday April 08, 2018 @11:10PM (#16790030)

Well seeing as all credit cards are basically subject to US law, you'd need to find a VPS that is going to accept say Bitcoin for server space. Perhaps one that is going to accept cash in the mail.

Then hope that said provider is reputable enough to be up to date on their security, and honest enough not to just cave under pressure.

Realistically the VPS solution fails simply because there is no obscuring of traffic. We all know that security through obscurity isn't real security. However if a VPN provider has 1,000 users using their IP block than any specific traffic is harder to isolate to one user. -- Presuming they are honest and not keeping logs.

Running your own VPS means that all traffic is owned by you.

[ Parent | on HN ]