News for hackers. Stuff that matters.

A comment on Inside Firefox’s DNS-over-HTTPS engine.

Re:Inside Firefox’s DNS-over-HTTPS engine by codedokode on Monday June 04, 2018 @03:42AM (#17225431)
Encrypted DNS is great, but please also do something with SNI. I am sure other users don't want their ISP to peek at what sites they are visiting too.
[ Parent | on HN ]
Re:Inside Firefox’s DNS-over-HTTPS engine by bagder on Monday June 04, 2018 @03:45AM (#17225444)
... that's why the article you're commenting on mentions SNI and that we hope to address that too (but separately) going forward!
[ Parent | on HN ]
Re:Inside Firefox’s DNS-over-HTTPS engine by codedokode on Monday June 04, 2018 @03:55AM (#17225492)
Also I thought that IPv6 doesn't need SNI, because with it you can allocate a separate IPv6 address for each service.
[ Parent | on HN ]
Re:Inside Firefox’s DNS-over-HTTPS engine by xorcist on Monday June 04, 2018 @04:41AM (#17225730)
That doesn't help privacy, as you could just connect to those addresses and see what certificate they present.
[ Parent | on HN ]