British ISP Lobbyists Backtrack on Calling Mozilla a Villain for DNS-over-HTTPS

Re:British ISP Lobbyists Backtrack on Calling Mozilla a Vill... by CydeWeys on Wednesday July 10, 2019 @12:21PM (#20403422)

If you are going to do this approach, make sure that your ISP's router/modem is not on the same network. I.e. you should be running your own network, then have it connect to the outside world through the Pi-hole which is the only device that is connected to the ISP-controlled hardware.

Otherwise, their hardware could just be reading everything and reporting home on it, since it'd be able to see the unencrypted DNS requests that are sent over its network to the Pi-hole.

[ Parent | on HN ]

Re:British ISP Lobbyists Backtrack on Calling Mozilla a Vill... by iforgotpassword on Wednesday July 10, 2019 @12:53PM (#20403805)

This is actually what my network looks like but I'm curious if we know of any ISP doing this. They would basically have to sniff on the bridge between Wi-Fi and wired, or even on the switch if both ends are wired. I'm usually rather pessimistic but that seems rather involved instead of "just" spying on all the non tech-savvy users using the default DNS settings which should make up 99% of your user base.

[ Parent | on HN ]