• FreeFacts
    link
    fedilink
    arrow-up
    3
    ·
    11 months ago

    DNS over TLS won’t save you thanks to SNI. As there is a huge shortage of IPV4 addresses, same IP addresses serve multiple hostnames, and to provide a working encryption, TLS handshake includes the requested hostname in plain text so that SNI can be used to determine which certificate should be used. That plaintext hostname is something your ISP can easily log.

    Rule of thumb is, Https does not provide anonymity, only encryption.