Re:Windows will improve user privacy with DNS over HTTPS
by IAmEveryone on Tuesday November 19, 2019 @04:35PM
(#21578568)
The Cloudflare privacy policy for 1.1.1.1 actually seems entirely reasonable, and the service just isn't that big so I can actually understand it: https://developers.cloudflare.com/1.1.1.1/commitment-to-priv.... Cloudflare does have sales offices and, obviously, servers in Europe, so GDPR should apply.
Deutsche Telekom isn't exactly evil, but it just handles far more data, of far higher value, including many bespoke government and business networks, phone networks, etc. The risk of their network being compromised seems higher.
ISPs have historically been evil far more often than other types of businesses, because they often are in the strong position of being the only or one of just a few options, and because switching ISPs is far more hassle than choosing one website over another. I would consider the chance of Telekom trying to squeeze another buck out of the relationship to be far higher than Cloudflare. IIRC Telekom did at some point get into the NXDOMAIN game?
Now, if I were in the US, I might arrive at very different conclusions, given how lax consumer protection laws are in general, how the US ISPs have a (recent) history of collecting and selling data and using other dirty tricks (like redirecting NXDOMAIN to their own adservers), and how in many if not most places in the US you have no freedom of choice in ISPs and are essentially subject to an ISP monopoly or duopoly in your area.