Re:I discovered caching CDNs were throttling my everyday bro...
by karmakaze on Thursday November 23, 2023 @10:15AM
(#38393605)
In most cases an ISP is also doing DNS resolution so would already be able to pretty accurately reverse map IPs to hostnames without reverse records.
Re:I discovered caching CDNs were throttling my everyday bro...
by lxgr on Thursday November 23, 2023 @01:35PM
(#38395927)
That's much easier to fix (by using DoH or DoT) than getting ECH widely deployed, though. Importantly, it can be done unilaterally by each user and doesn't need cooperation on both sides of the connection.
Many browsers these days support using DoH without changing any OS settings.
Re:I discovered caching CDNs were throttling my everyday bro...
by karmakaze on Thursday November 23, 2023 @06:59PM
(#38399206)
That's not actually a fix. As long as some other subscriber does the DNS lookup, then the ip address will be associated with the name that was looked up. If you happen to use a different resolver and get the same address, there's no difference.
Re:I discovered caching CDNs were throttling my everyday bro...
by lxgr on Thursday November 23, 2023 @08:05PM
(#38399682)
If the IP address belongs to a cloud load balancer or CDN, that’s still much better than hostname-level detail. Even for subdomains it helps (think somebody.bloghoster.tld).
And ECH will still reveal the outer SNI, apparently.
You really don't when every modern browser sends SNI, which exposes the full domain name it's trying to connect to.