Privacy online just got easier with today’s Firefox release

Re:Privacy online just got easier with today’s Firefox release by kotlin2 on Tuesday October 18, 2022 @09:51AM (#33247118)

One privacy feature I’d really like is kind of like HTTPS everywhere, except it’s TLS 1.3 w/ SNI encryption everywhere.

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by bobmaxup on Tuesday October 18, 2022 @10:39AM (#33247918)

https://support.mozilla.org/en-US/kb/https-only-prefs/

https://support.mozilla.org/en-US/questions/1101896

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by mehlmao on Tuesday October 18, 2022 @10:29AM (#33247745)

Firefox does offer an HTTPS only-mode, which tries to upgrade HTTP to HTTPS and warns you before connecting if it's not enabled.

Settings > Privacy & Security > HTTPS-Only Mode

As far as I know, there are still no practical attacks against TLS 1.2.

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by kotlin2 on Tuesday October 18, 2022 @10:41AM (#33247944)

The issue I’d like to solve is that, even with TLS, you still leak the SNI as part of the handshake. So your ISP can tell you’re connecting to google.com even if you’re using HTTPS.

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by emptyparadise on Tuesday October 18, 2022 @10:56AM (#33248212)

Wouldn't the ISP still know that you're connecting to Google, however?

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by kotlin2 on Tuesday October 18, 2022 @10:58AM (#33248242)

Your ISP would know the IP address, but not specifically that you were connecting to google.com.

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by grangerg on Tuesday October 18, 2022 @03:04PM (#33252320)

Even without rDNS, they're almost certain to know of at least one DNS name that goes with the IP address you're connecting to. Even if not, they can label/categorize/group it by ISP and/or approximate location.

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by eli on Tuesday October 18, 2022 @10:02AM (#33247276)

What would happen when you click a link to a site that doesn't support that?

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by kotlin2 on Tuesday October 18, 2022 @10:18AM (#33247562)

You’d get a warning and be asked to proceed. Similar to how https everywhere works.

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by btdmaster on Tuesday October 18, 2022 @10:51AM (#33248133)

Does anything support Encrypted Client Hello given its draft status?

I got it back as unsupported when testing (yes, I would prefer to test on something other than Cloudflare but I couldn't find any): https://www.cloudflare.com/ssl/encrypted-sni/

[ Parent | on HN ]

Re:Privacy online just got easier with today’s Firefox release by kotlin2 on Tuesday October 18, 2022 @11:22AM (#33248685)

I guess ESNI was deprecated and removed from Firefox in favor of ECH (just found that out now). CloudFlare supports ESNI, but not ECH. So that feels like a step backwards.

[ Parent | on HN ]