News for hackers. Stuff that matters.

A comment on I discovered caching CDNs were throttling my everyday browsing. Parent comment

Re:I discovered caching CDNs were throttling my everyday bro... by lxgr on Thursday November 23, 2023 @01:35PM (#38395927)
That's much easier to fix (by using DoH or DoT) than getting ECH widely deployed, though. Importantly, it can be done unilaterally by each user and doesn't need cooperation on both sides of the connection.

Many browsers these days support using DoH without changing any OS settings.

[ Parent | on HN ]
Re:I discovered caching CDNs were throttling my everyday bro... by karmakaze on Thursday November 23, 2023 @06:59PM (#38399206)
That's not actually a fix. As long as some other subscriber does the DNS lookup, then the ip address will be associated with the name that was looked up. If you happen to use a different resolver and get the same address, there's no difference.
[ Parent | on HN ]
Re:I discovered caching CDNs were throttling my everyday bro... by lxgr on Thursday November 23, 2023 @08:05PM (#38399682)
If the IP address belongs to a cloud load balancer or CDN, that’s still much better than hostname-level detail. Even for subdomains it helps (think somebody.bloghoster.tld).

And ECH will still reveal the outer SNI, apparently.

[ Parent | on HN ]