Hacker News Reader

> using anything but your ISP's DNS decrease privacy

Using your ISP's DNS decreases privacy. I assume you mean that because UDP/53 DNS is unencrypted, if you switch to another DNS provider, then both the ISP and the new DNS can see your requests? In which case I present to you DNS over HTTPS

View on HN

How can your ISP route the traffic if according to you it doesn't know where it goes? You need a VPN if you want to hide your traffic destinations from your ISP... not encrypted DNS

The DNS lookup would be encrypted. The IP would of course not be. This means the ISP would be able to see the IP but not domain [1] of your destination.

[1]: See SNI: https://www.cloudflare.com/learning/ssl/what-is-sni/

So what's the percentage of IP addresses that host more then one domain?

Also, I remember reading something like HTTPS was leaking URLs...

Basically every single site hosted on any CDN or other cloud host. What's the percentage of people that host their site on dedicated links? Probably a decent percentage, and probably the big 10 sites, but maybe not as many of the others..?

Though as mentioned this is moot due to SNI, in most cases :(

> Also, I remember reading something like HTTPS was leaking URLs...

Yep, that's SNI

Reply on news.ycombinator.com