this post was submitted on 23 Apr 2024
1064 points (97.2% liked)

Memes

49814 readers
1352 users here now

Rules:

  1. Be civil and nice.
  2. Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.

founded 6 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
1064
Cough Cough... Chrome... Chough... (slrpnk.net)
submitted 1 year ago by [email protected] to c/[email protected]
149 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

It will prevent the ISP from snooping on, or tampering with, the DNS request. However when you go to use the IP you've retrieved via DoH/DoT; your first request establishing a TLS connection to that IP will contain an unencrypted SNI which states the domain you are trying to use. This can be snooped on by your ISP.