Comcast, Mozilla strike privacy deal to encrypt DNS lookups in Firefox

Re:Comcast, Mozilla strike privacy deal to encrypt DNS looku... by gsich on Thursday June 25, 2020 @06:49PM (#23646658)

>Now, Comcast and Mozilla come to some sort of agreement which effectively restores Comcast's access to their customer's DNS traffic?

They could (and can) do that regardless of DNS. Most websites and other services are uniquely identifiable by their IP(-range).

Encrypted SNI is still a draft so not applicable here.

[ Parent | on HN ]

Re:Comcast, Mozilla strike privacy deal to encrypt DNS looku... by pabs3 on Thursday June 25, 2020 @10:59PM (#23648249)

> Most websites and other services are uniquely identifiable by their IP(-range).

You are very correct about that:

"What can you learn from an IP?" https://irtf.org/anrw/2019/slides-anrw19-final44.pdf

Basically Encrypted Client Hello (the new name for eSNI) and DoH/DoT are only useful for websites hosted on global CDN providers like Akamai, Cloudflare and so on.

[ Parent | on HN ]