Re:Microsoft bakes a VPN into Edge and turns it on
by zekica on Friday September 30, 2022 @01:07PM
(#33037521)
Modern TLS is enough to prevent others from eavesdropping everything except domain names when on public WiFi. Domain names are sent in clear text if your client supports SNI.
[ Parent
| on HN ]
Re:Microsoft bakes a VPN into Edge and turns it on
by doubled112 on Friday September 30, 2022 @01:09PM
(#33037549)
A trail of DNS names is more than enough to know what somebody is up to.
Re:Microsoft bakes a VPN into Edge and turns it on
by uup on Friday September 30, 2022 @01:11PM
(#33037572)
You could use DoH, which you should do anyway. No reason to leak DNS lookups to anyone.
Re:Microsoft bakes a VPN into Edge and turns it on
by madars on Friday September 30, 2022 @01:32PM
(#33037927)
DoH alone is not enough due to https://en.wikipedia.org/wiki/Server_Name_Indication being sent in plain text. Some day ECH (formerly, eSNI) should help with that.
Re:Microsoft bakes a VPN into Edge and turns it on
by erinnh on Friday September 30, 2022 @04:28PM
(#33040349)
I thought TLSv1.3 already encrypted the SNI?
Re:Microsoft bakes a VPN into Edge and turns it on
by detaro on Saturday October 01, 2022 @09:17AM
(#33046375)
No. ESNI is an later-created extension to TLS 1.3
Re:Microsoft bakes a VPN into Edge and turns it on
by uup on Saturday October 01, 2022 @06:58AM
(#33045618)
It does
Re:Microsoft bakes a VPN into Edge and turns it on
by Varloom on Sunday October 02, 2022 @04:09PM
(#33059695)
ESNI is not implemented yet on any website. And there is no software support except beta versions of Chrome/Edge and you have to manually toggle flags in dev mode.
All SNIs are passed as plain text to your ISP/VPN, even with DoH/TLS secure DNS enabled.
Re:Microsoft bakes a VPN into Edge and turns it on
by ranger_danger on Friday September 30, 2022 @01:39PM
(#33038024)
you'll always be leaking it to whoever you are sending your query to.