Hacker News Reader

Comment by Joker_vD | Hacker News Reader

For the same reason you trust your ISP? It handles all your internet traffic; and depending on where you live, probably has government-mandated back doors, or is willing to cooperate with arbitrary requests from law-enforcement agencies.

That's why TLS exists, after all. All Internet traffic is wiretapped.

View on HN

I'd be significantly more suspicious by default of ISPs that charge no money.

> That's why TLS exists, after all.

That protects you if you're using standard methods to connect. Installed software gets to bypass it.

And that's why I, personally, rent a VPS, run "ssh -D 9010 myvps" in a background, and selectively point my browser at it via proxy.pac (other apps get socksified as needed; although some stubbornly resist it, sigh).

But it's cumbersome.

You should run VPN on your gateway instead.

Well, if someone want to cover a large set of psychological profile, they can always have a full range of virtual brands, going from freemium+ to luxurious-esthetics.

Maybe some

Because I pay the ISP, it is heavily regulated, and they actually make a lot of money from being an ISP?

> I don't understand why so many people are using [Cloudflare].

> "Let us handle all your internet traffic.. you can trust us.. []"

TLS does not help, when most Internet traffic is passed through a single entity, which by default will use an edge TLS certificate and re-encrypt all data passing through, so will have decrypted plain text visibility to all data transmitted.

I have a contract with my ISP, I can know who runs the company and I can sue the company if they violate anything they promised.

Yeah, and in your contract with ISP you explicitly agree to file any lawsuit against them in small claims court only. Although you can probably go and complain to FCC about them?

TLS doesnt hide IP addresses

Reply on news.ycombinator.com