Hacker News Reader

Comment by GordonS | Hacker News Reader

> If you use Chrome or Firefox, almost all of your data is hidden from the ISP

Can you elaborate on how Chrome and Firefox hide your traffic from your ISP, and what privacy advantages they have over IE, Safari or Opera?

View on HN

Sure. Chrome and Firefox both implement (or are implementing) DNS over HTTPS, which hides what domains you're visiting by passing the request encrypted through a provider such as Google. Chrome also has a "data saver" on mobile that passes your traffic through Google's servers. Opera has had similar functionality for some time. Safari and IE will implement DNS over HTTPS once it's a standard, which should be soon. Don't know if they have plans to support tunneling too.

What is stopping yourisp from doing reverse dns and looking up what domain is pointing to the IP you are connecting to?

You can't do reverse DNS for sites using SNI. Multiple hosts use the same IP.

> Chrome and Firefox both implement (or are implementing) DNS over HTTPS, which hides what domains you're visiting by passing the request encrypted through a provider such as Google.

DNS over HTTPS doesn't actually hide the domains you're visiting, because TLS SNI means the server hostname is sent in plaintext as part of the TLS handshake.

And for major sites, they probably aren't sharing their public IPs with other sites, hence the ISP can know what site you're connecting to via knowing what IP you're sending datagrams to.

Ah, I had no idea it was already implemented in those browsers!

It appeared to be disabled by default in my Firefox install - for anyone else, I followed these instructions to enable it:

https://www.ghacks.net/2018/04/02/configure-dns-over-https-i...

Reply on news.ycombinator.com