News for hackers. Stuff that matters.

A comment on Centralised DoH is bad for privacy. Parent comment

Re:Centralised DoH is bad for privacy by rocqua on Wednesday September 25, 2019 @12:25PM (#21072285)
You can still set 1.1.1.1 as your DNS resolve in your DHCP server if you want to trust your ISP.

If enough people switch to DoH (as would be needed for DoH by default to have a measurable effect) and the data is even slightly valuable, unscrupulous ISPs could still use SNI, or even just reverse IP lookups to track your movements.

[ Parent | on HN ]
Re:Centralised DoH is bad for privacy by ti_ranger on Thursday September 26, 2019 @01:47AM (#21078557)
> You can still set 1.1.1.1 as your DNS resolve in your DHCP server if you want to trust your ISP.

It's not that I necessarily trust my ISP, I don't want to be forced to also trust Cloudflare (both for privacy and availability).

So no, I don't use 1.1.1.1, I run my own recursive name server.

[ Parent | on HN ]
Re:Centralised DoH is bad for privacy by rocqua on Thursday September 26, 2019 @03:39AM (#21079013)
That also works for avoiding your ISP serving your DNS requests.
[ Parent | on HN ]
Re:Centralised DoH is bad for privacy by chopin on Thursday September 26, 2019 @04:53AM (#21079310)
I also run my own recursive resolver but this doesn't prevent snooping by the ISP as the recursive requests go through its network.
[ Parent | on HN ]