So, I read some articles on DOH and looks like the whole thing is a myth and doesn’t really help in enhancing user privacy and security. Even if the DNS requests are encrypted, the ISP will still be able to track you.
What are your thoughts?
So, I read some articles on DOH and looks like the whole thing is a myth and doesn’t really help in enhancing user privacy and security. Even if the DNS requests are encrypted, the ISP will still be able to track you.
What are your thoughts?
Hi!
Using DNS over https (DOH) prevents your Internet Service Provider (ISP) from monitoring your traffic. However, DOH doesn’t hide your IP address which is the elephant in the room since only with that piece of data is possible to determine what are the websites visited by the user. Moreover, Server Name Indication (SNI) - an extension to Transport Layer Security (TLS) - leaks the hostname that the client is attemping to connect to.
So, if you want to hide the websites you visit, a good idea would be using a VPN or Tor. However, even VPN has his own problems
If you want to learn more, i will link you a couple of article written by madaidan plus some other sources.
https://madaidans-insecurities.github.io/encrypted-dns.html https://blog.powerdns.com/2019/09/25/centralised-doh-is-bad-for-privacy-in-2019-and-beyond/
https://madaidans-insecurities.github.io/vpns.html
https://matt.traudt.xyz/posts/you-want-tor-24tFBCJV.html