I'd assume if you're using their pipes, they can see what goes through it, regardless.
Genuinely intrigued in this.
I'd assume if you're using their pipes, they can see what goes through it, regardless.
Genuinely intrigued in this.
This is why there is such a push for end to end encryption on web traffic, chat apps, etc.
At least DDG offers in their options to scramble the URL but one has to know about that feature AND enable it. It is in their settings under Privacy and you have to turn OFF GET (2nd option). https://duckduckgo.com/settings#
You are correct that the terms are in the URL, however only the browser and endpoint can see them. All your ISP sees is that you accessed example.com, and not example.com/search-terms-here. The TLS handshake is for the domain only, then encryption kicks in, then everything after is encrypted.
Your ISP cannot see what you are searching for, they can only see which sites you use for search.