Can't ISPs just monitor the DNS protocol and still gather a list of all sites you visit?