Re:Centralised DoH is bad for privacy
by yc12340 on Thursday September 26, 2019 @05:34AM
(#21079473)
ESNI does not provide much real security, only obfuscation.
Besides, it is not going to make it (South Korea already blocks it and others will follow).
They see the destination IP you are connecting to, usually behind one IP is only one web site. ESNI doesn't matter unless you are connecting to a site on a shared host.
This is false if you have ESNI enabled. They see what IP addresses, not what web sites you are visiting. ESNI isn't on by default yet, but it will be.