Seems like you forget Europe and e.g. GDPR.
It would be a big no-no in Denmark: My bank has one division for normal accounts and another for mastercard. The 2 divisions are separate companies, so I have to sign a paper to allow the MasterCard division to know about my normal account.
So Danes have no hesitation giving out personal information as they know it’s protected by law. “We don’t sell your info” is redundant in Denmark.
Danish article on the subject: https://www.version2.dk/artikel/tdc-saelger-data-mobilbruger...
So there is still plenty of reasons not to trust your ISP in Denmark and Europe in general.
For what was queried on their servers.
You are forgetting that the author is from Switzerland.
The DNS implementation used by every non-Tor user around the world today is already subject to warrantless spying by every ISP and government in the world, due to the property known as “cleartext”. If you opt-in to the Cloudflare trial, you are only at risk of warrantless spying by Cloudflare — rather than every ISP — and the US government — rather than every government.
My cellular ISP sells my DNS queries to advertising networks, and my home ISP is wiretapped warrantlessly by the US government. This experiment decreases the chances of the resale of my personalized data to data warehouses and decreases the chances of success of warrantless wiretapping by my government.
I envy those of you that believe you can trust your ISPs and governments.
(Disclosure: I work for Cloudflare.)
Presumably, that would make them liable to damages.
Moreover, they will be subject to audits, where such spying is at risk of getting caught.
This is a lot better than everyone trusting their own ISP.
If you don't live in the US a local ISP might be a lesser evil and I wonder why mozilla should make that tradeoff for everyone.
Sure, some jurisdictions might be worse than the US and TRR might be a win there. But for some it's worse. So we shouldn't pretend it's a one-size-fits all solution.
I’ve also spent time in India with a small ISP, and I hated their DNS: they actively intercepted all DNS and replaced it with their own OpenDNS arrangement, involving the horrible NXDOMAIN replacement that was still a thing at the time, and in such a way that you couldn’t opt out of it! I don’t know how trustworthy they might or might not have been (I didn’t personally know them), but I do know that I loathed their technical decisions and would fain have bypassed them.
I use Swisscom (larger ISP here in Switzerland, both for mobile & home connectivity) but damn if I do not encrypt /hide as much traffic (DNS first) as possible to prevent exactly them from being able to see exactly what I do.
I have worked for far larger providers and I have personally investigated 10's of cases where a "roque" operator has fired for "abusing" access to very privacy sensitive data (being it internet access or mobile phone locations etc). As [most of the time|always] in these cases, the offender gets offered a decent exit to prevent (public exposure via) lawsuits so little gets known to the outside world.
In the end it is up to you, but my advice would always be: do not put all your eggs in one basket.
Remember when Google did so, too? Then they bid on military contracts and bought a military contractor.
What do you think damages would be if you violate a contract with Mozilla that puts millions of users at risk? (I wouldn't want to test that)
And won't they get caught during audits? Or at least risk it.
Do you think you'll be able to negotiate a better solution on your own... If so, just change the defaults.
I have a bridge to sell!
Why would this not apply to Cloudflare as well?
lol
This is such a toxic decision by Mozilla, but I'm not surprised since they have been leaking customer data to other companies (Google) that threw money at them in the past too.
Downvote me all you want, but domain names are still being sent to the ISP unencrypted, as of TLS 1.3... so it doesn't matter who processes your DNS queries, your ISP still knows everything about which sites you are accessing... but anyways, bare IP addresses still reveal a lot (metadata)
https://tools.ietf.org/html/draft-rescorla-tls-esni-00
interestingly, something like DoH is a pre-requisite for pulling off esni.
I have never trusted any local ISP. They’re commonly expressly allowed by law to share roughly whatever they like about you†, and they are known to do so.
Cloudflare has at least promised not to be evil, and is to be audited annually concerning it. If they desire to be evil I have no doubt they could wangle it, but I still trust them way more than I trust any ISP, because they’re already known to be evil under these definitions.
----
† (This is a gross simplification, but it’s broadly true enough in most countries.)