this post was submitted on 30 Jun 2023
40 points (100.0% liked)
Privacy
40315 readers
523 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The one from your ISP. Your ISP can see your traffic anyway, so you gain nothing by using a third-party DNS server.
Okay, maybe I got the question wrong. If you care about content blocking, then you are right (though I'd prefer self-hosted resolvers like pi-hole or AdGuard Home over third party resolvers).
If you use the same or similar blocklist it does not provide additional protection though.
As far as I read (I'm no expert!) they could check the SNI of the TLS handshake if they want. But using the DNS of the ISP is handing them the data right in a way they can analyze/use them very easily afaik?
Still learning about this topic!
They route your traffic, hence they can see all IP addresses you communicate with. With a reverse lookup you can then usually find out the address too.
Even if you use DOH for upstream servers?
In the end it comes down to what your goals is. DOH indeed hides DNS queries from sniffers and your ISP, but the traffic between you and your destination is still visible for the ISP (unless you use a VPN or TOR).
If you only care about the content blocking aspect a third party resolver may make sense as @CrazyClown@lemmy.ca explained below.
Yes, my question was just referred to DNS queries. Thank you for your reply.
glowing hard
Mt ISP can't see my traffic or my DNS lookups lol
Congrats but then you are using more than just another DNS resolver/different DNS technology.
Yes, if you want privacy then you need a good VPN provider