Hacker News Reader

ISPs can presumably correlate the Google query string with the request following the response to the goto and so make a search index? I guess they would charge too much.

Do any large ISPs use visit data to feed into a search index?

View on HN

ISPs do not see query strings since Google uses HTTPS. ISPs can only see the domain and IP address you are connecting to.

Can they even see the domain? Assuming you're not using the ISP's DNS of course.

Most people use the ISP DNS, but even if they don't, the Domain to IP is public information.

There's even a reverse pointer query that can be made to get a domain to IP from a legacy ARPA TLD, although it isn't 100% robust.

Unless you're using DNS over HTTPS they can see the unencrypted DNS traffic. There's also Encrypted Client Hello, but they can also see which IP you're connecting to.

Also if the domain responds on the bare IP or there's nothing else they've seen on that IP it's a fair assumption. This is without even wondering if their router sends telemetry

Telemetry isn't a concept that would apply to a router. The information that your router sends, they send to an ISP controlled router, they receive this information for operational purposes, so they don't need to install some client-device application to further collect data.

Doh, of course.

Reply on news.ycombinator.com