Re:ISP Association Nominates Mozilla as “Internet Villain”
by yholio on Thursday July 04, 2019 @07:24PM
(#20358620)
But if Cloudflare is the point of aggregation and the ISP can no longer distinguish between what, according to UK law, is legal and illegal traffic, then... surely the legal onus of performing the filtering will fall on Cloudflare?
When they are providing internet content to UK customers, they must respect UK law. It's a dangerous chicken game to think UK will not be able to enforce it's laws against Cloudflare.
The villain here is the UK govt. ISPs should applaud the technical developments with all their hearts since they are legally off the hook.
Re:ISP Association Nominates Mozilla as “Internet Villain”
by munk-a on Thursday July 04, 2019 @07:46PM
(#20358744)
I would be okay with showing all of the UK a "Sorry it doesn't appear your government supports modern common sense. Please consider upgrading your government for full site functionality."
Re:ISP Association Nominates Mozilla as “Internet Villain”
by HeWhoLurksLate on Thursday July 04, 2019 @08:02PM
(#20358825)
Man, I would hate to block off support for a bunch of the things that people need for their daily work, but if it makes things obvious to everyone who's at fault, then it might just work, and I'd be willing to take a hit for that to happen.
Re:ISP Association Nominates Mozilla as “Internet Villain”
by Analemma_ on Thursday July 04, 2019 @07:11PM
(#20358535)
This doesn’t make any sense. Your ISP still knows your browsing history even if they can’t see your DNS requests.
Re:ISP Association Nominates Mozilla as “Internet Villain”
by nullwasamistake on Thursday July 04, 2019 @07:19PM
(#20358589)
No they don't. TLS has encrypted sites for a long time. And with encrypted SNI they get no info about browsing history. This is a blatant attempt to stymie the last cleartext protocol that can be used to record browsing history.
Re:ISP Association Nominates Mozilla as “Internet Villain”
by nathanaldensr on Thursday July 04, 2019 @07:18PM
(#20358577)
Not if your traffic is HTTPS+TLS. They will only know--if they are the target DNS server--what IP you are connecting to. The secure channel protects against them knowing more than that.
Re:ISP Association Nominates Mozilla as “Internet Villain”
by ianlevesque on Thursday July 04, 2019 @07:20PM
(#20358594)
SNI leaks the domain name you are requesting. It's pretty shocking.
Re:ISP Association Nominates Mozilla as “Internet Villain”
by snek on Thursday July 04, 2019 @07:36PM
(#20358689)
Firefox also supports ESNI! These crazy villians shakes fist at Mozilla
Re:ISP Association Nominates Mozilla as “Internet Villain”
by cesarb on Thursday July 04, 2019 @07:29PM
(#20358648)
There is already work on encrypted SNI. Last time I looked, it uses information from DNS, so encrypted DNS is a prerequisite.
Re:ISP Association Nominates Mozilla as “Internet Villain”
by perfmode on Thursday July 04, 2019 @07:13PM
(#20358546)
how? wouldn’t they just see TCP packets?
Re:ISP Association Nominates Mozilla as “Internet Villain”
by derefr on Thursday July 04, 2019 @07:19PM
(#20358591)
They see the destinations of those packets, so they know what sites (IP addresses) you're interacting with, on what ports.
They don't get the domain names, but for the very popular web properties that all these analytics care about calculating your relationship to, they don't need them; the IP is enough to discern which site you're visiting.
Re:ISP Association Nominates Mozilla as “Internet Villain”
by GauntletWizard on Thursday July 04, 2019 @07:20PM
(#20358597)
Yes, and the IP addresses there are public, and reverse DNS entries are easy to find. There's some ambiguity, but not much. Your isp doesn't care about the difference between fbcdn.net and Facebook.com when selling your traffic history.
Cloudflare (which has somewhat shady ties to us govt maybe) is pushing hard for DNS over secure channel and it's pissing off ISP's. Because they won't be able to sell personalized browsing history if is catches on....
Control/view of DNS requests is worth A LOT of money to advertisers/ISP's because it's currently immune to ad blockers and ties a user directly to their IP and real info. It's even better than browsing history because it includes everything a user does outside the browser as well, protocol agnostic, cross device.
It's the perfect example of "metadata" that various companies and agencies collect for all sorts of shitty reasons. It's the last cleartext frontier of activity monitoring.