News for hackers. Stuff that matters.
Re:Smart-TV blocklist for Pi-Hole by eli on Saturday March 12, 2022 @09:36PM (#30657327)
Many of the biggest ISPs in the US are actively monitoring DNS queries, collecting the data of which sites you visit, and packaging it for sale to ad networks and data brokers. DoH stops that.
Re:Smart-TV blocklist for Pi-Hole by DistractionRect on Saturday March 12, 2022 @10:18PM (#30657580)
It really doesn't, as server name indication is sent in clear text. As encrypted SNI didnt take off, you dont actually get privacy benefits from DoH and friends, just security/mild inconvenience to censors.
Re:Smart-TV blocklist for Pi-Hole by NavinF on Saturday March 12, 2022 @10:39PM (#30657684)
> encrypted SNI didnt take off

Says who? I think your data is very old considering that ECH replaced ESNI 2 years ago. IIRC it has ~50% adoption, same as TLS 1.3. Just about every company that cares about security supported ECH for years.

Moreover, someone has to move first. If DoH wasn’t widely deployed you’d be complaining that ECH is useless because DNS is unencrypted.

Re:Smart-TV blocklist for Pi-Hole by syshum on Sunday March 13, 2022 @05:43AM (#30659656)
Yes and it is better that google and cloudflare do that collecting under the guise of protection...

People really are gulible aren't they...

DoH is a not or a privacy feature. It simply changes who is collecting your data and makes it harder for responsibile network operators to protect their users under the guise that the big tech companies are really protecting the users from the network operators and "big bad ISPs".

Ironic given the billions big tech is making from that data.

Re:Smart-TV blocklist for Pi-Hole by eli on Sunday March 13, 2022 @11:46AM (#30662278)
Google and Cloudflare don’t sell data on dns queries per their privacy policies. Verizon does.
Re:Smart-TV blocklist for Pi-Hole by syshum on Sunday March 13, 2022 @07:51PM (#30666991)
I see this common response, but that is not really a valid rebuttable. Companies do not need to sell your data to violate your privacy, in the case of google their entire model is selling their TARGETING, not the data. That is still a violation of privacy. The fact they did not "sell" it to a 3rd party to form the customer profile changes little.

In the case of cloudflare, it is going to be interesting how they continue to justify the free public services to institutional investors now that they are public. I have a feeling there is going to be some strong pressure to either cease the free services, or find away to monetize them which likely will involve some kind of usage of that data maybe not selling per say, but some other kind of targeting or something to add to the profitability of the company.

I am no more comfortable with cloudflare having my data than I am with google or verizion, I have never used any of their DNS services

Re:Smart-TV blocklist for Pi-Hole by eli on Monday March 14, 2022 @09:23AM (#30672114)
Google doesn't sell targeting based on DNS queries.

> I am no more comfortable with cloudflare having my data than I am with google or verizion, I have never used any of their DNS services

It's not either/or. If you use Cloudflare or Google DNS and it isn't encrypted then Verizon has it too. With DoH they don't.