How to keep your ISP’s nose out of your browser history with encrypted DNS

Re:How to keep your ISP’s nose out of your browser history w... by chupasaurus on Monday April 09, 2018 @03:11AM (#16791017)

Russian here. Entries in gov's blacklist of sites should include IP addresses, domain names and optionally URLs. SNI isn't that helpful for ISPs because they could block traffic by IPs rather using DPI (IIRC only one NIR is using it, but for DNS rather than TLS itself).

[ Parent | on HN ]

Re:How to keep your ISP’s nose out of your browser history w... by aaomidi on Monday April 09, 2018 @03:17AM (#16791037)

For sites like google, blocking IPs would meet resistance.

[ Parent | on HN ]

Re:How to keep your ISP’s nose out of your browser history w... by chupasaurus on Monday April 09, 2018 @03:33AM (#16791090)

This situation is covered with a whitelist of IPs and domains (year ago it became official after exploitation of vulnerability in how blacklist register works, before it was on ISPs, Youtube was banned by some ISPs quite a few times), including .google.com, .youtube.com and other Alphabet's domains, *.facebook.com and some others.

[ Parent | on HN ]

Re:How to keep your ISP’s nose out of your browser history w... by dullgiulio on Monday April 09, 2018 @04:25AM (#16791301)

So effectively, if you post something on Blogger it cannot be taken down, because the whole Google would come down with it.

Still, encrypting SNI hides quite some information (were you searching, watching youtube, reading blogger, was it image search, maps...?)

[ Parent | on HN ]

Re:How to keep your ISP’s nose out of your browser history w... by chupasaurus on Monday April 09, 2018 @08:41AM (#16792462)

Rechecked the list, only https://*.youtube.com and (whooping) .google. are inside [0]. [0]: https://storage.googleapis.com/smisc/%D0%A1%D0%BF%D0%B8%D1%8...

[ Parent | on HN ]