Hacker News Reader

How exactly encrypted DNS will reduce spying? ISPs will still be able to observe IP addresses users connect to and even particular host names in SSL handshakes.

View on HN

Due to shared hosting you can't map every IP to a hostname, and encrypted SNI is a thing.

But the ISP can likely map most of the IPs to hostnames, as one would expect shared hosting to only be used for smaller sites.

Reply on news.ycombinator.com