News for hackers. Stuff that matters.

A comment on How to keep your ISP’s nose out of your browser history with encrypted DNS. Parent comment

Re:How to keep your ISP’s nose out of your browser history w... by AlexCoventry on Sunday April 08, 2018 @07:25PM (#16789112)
> you can probably do some sort of DHE

Could the browser send a symmetric key encrypted in the public key of the target website, as part of the initial challenge?

[ Parent | on HN ]
Re:How to keep your ISP’s nose out of your browser history w... by infogulch on Sunday April 08, 2018 @08:11PM (#16789300)
The point is you don't know what the public key of the target website is. You find out by asking for it, and then you verify it's authenticity by checking the signature. Before you connect all you know is the domain and the keys of CA's you trust.
[ Parent | on HN ]
Re:How to keep your ISP’s nose out of your browser history w... by AlexCoventry on Sunday April 08, 2018 @09:14PM (#16789543)
Ah, right. Thanks.
[ Parent | on HN ]