Hacker News Reader

Comment by rbut | Hacker News Reader

I use Cloudflare's DoH DNS (https://1.1.1.1) and tunnel that over Mullvad's VPN.

That way Mullvad can only see the IPs I visit, Cloudflare only see DNS requests coming from the VPN IP, and my ISP sees nothing.

Mullvad's DoH DNS seems nice, but it provides potentially less privacy than the above, so I won't be using it.

View on HN

>That way Mullvad can only see the IPs I visit,

I hate to break it to you, but if they wanted to look at the SNI on all your TLS connections, they could; ECH is not really a thing yet.

Yes you're correct if Mullvad is performing packet inspection then there isn't much I can do about that.

My point stands though about not putting all eggs in the one basket and using a different DNS provider than that of the VPN provider.

No, I don't think you understand. "That way Mullvad can only see the IPs I visit" is your point and it _doesn't_ stand. There isn't really multiple ways of looking at it; the point you were making is exactly the point that was refuted, and all this "my point stands" is the weakest shit in the whole white world— a compulsion, almost inertial in nature, where by attempting to save face we present ourselves clueless. Now, all this "putting all eggs in the one basket" and common sense knowledge would be very adorable had you not been wrong, and had it not been a bad advice leaving you at a disadvantage. Good luck

I don't think it's recommended to use another DNS with Mullvad because it makes you more unique.

Reply on news.ycombinator.com