News for hackers. Stuff that matters.

A comment on Mozilla VPN. Parent comment

Re:Mozilla VPN by __turbobrew__ on Thursday June 18, 2020 @04:02PM (#23567309)
Unless you are using a VPN/Wireguard/Proxy your ISP can simply look at the source address on the IP packets and do a reverse IP lookup to find out what site you are accessing. Doesn't matter if you are using DoH, DNS over TLS, DNSCRYPT, etc....

At a conference I was talking to one of the OpenDNS engineers on the DoH project and when I asked "so how does DoH help snooping if people can just look at IP headers?" they conceded that it really doesn't help if someone is determined to snoop.

[ Parent | on HN ]
Re:Mozilla VPN by xrisk on Thursday June 18, 2020 @04:25PM (#23567583)
Doesn’t work with a large number of sites because of Cloudflare.

Edit: it _is_ easy to read the destination address from TCP packets though.

[ Parent | on HN ]
Re:Mozilla VPN by __turbobrew__ on Thursday June 18, 2020 @04:39PM (#23567751)
Yea, you are correct. I got it mixed up, your ISP would look at the destination address of outgoing packets from your home.
[ Parent | on HN ]