Encrypted SNI Comes to Firefox Nightly • Hacker News Board

Re: Encrypted SNI Comes to Firefox Nightly

#151

Post by jopsen » Fri, Oct 19, 2018, 11:18 PM UTC

auslander wrote: post #123

jopsen wrote: post #36

Earlier quoted context omitted.

But if you're using CloudFlare through Firefox, Mozilla is doing collective bargaining on your behalf. It's a different world, true, but technology can't be stopped. If Mozilla succeeds in being a agent negotiating on behalf of users, all your base might be governed by reasonable contracts.

Thing is, it does bargain, and trusts third-party privacy policy, but I, for example, do not trust Cloudflare. "We’ve chosen Cloudflare because they agreed to a very strong privacy agreement" [0]. Like, legally agreed? With regular audits and full access for Mozilla people? Where does that leave me, if it gets baked into my browser? [0] https://blog.nightly.mozilla.org/2018/06/01/improving-dns-pr...

You seem to complain, but I hear of no alternatives..

The world is moving towards more cloud computing, Mozilla can't stop the centralization of the internet. But if they can use collective bargaining to protect consumers that might do a lot of good.

Re: Encrypted SNI Comes to Firefox Nightly

#152

Post by auslander » Sat, Oct 20, 2018, 1:46 AM UTC

jopsen wrote: post #150

auslander wrote: post #145

Earlier quoted context omitted.

My concern is whether this integration with CF will make its way into default FF install.

But if you do DNS resolution yourself you'll loose privacy. You'll probably always be able to run your own. If you so desire.

I use DNS over TLS via multiple resolvers, so not my case.

Privacy is a fragile thing. Is it better putting all my lookups in one basket (CF)? For hiding from ISP, nothing beats VPN, and in this case no need for ESNI. My point is its not up to Mozilla to turn my data to third party.

And, frankly, if choosing between ISP and CF (or Google), leaks to ISP impact your privacy much less. ISP have no global data to ML your history, no analytics cookies, no clear text traffic access.

Re: Encrypted SNI Comes to Firefox Nightly

#153

Post by auslander » Sat, Oct 20, 2018, 1:52 AM UTC

jopsen wrote: post #151

auslander wrote: post #123

Earlier quoted context omitted.

Thing is, it does bargain, and trusts third-party privacy policy, but I, for example, do not trust Cloudflare. "We’ve chosen Cloudflare because they agreed to a very strong privacy agreement" [0]. Like, legally agreed? With regular audits and full access for Mozilla people? Where does that leave me, if it gets baked into my browser? [0] https://blog.nightly.mozilla.org/2018/06/01/improving-dns-pr...

You seem to complain, but I hear of no alternatives.. The world is moving towards more cloud computing, Mozilla can't stop the centralization of the internet. But if they can use collective bargaining to protect consumers that might do a lot of good.

Installing unbound, which supports DoT and multiple resolvers on your home router, for example

Re: Encrypted SNI Comes to Firefox Nightly

#154

Post by Simon_says » Tue, Oct 23, 2018, 2:07 AM UTC

comesee wrote: post #134

Simon_says wrote: post #133

Earlier quoted context omitted.

You're being downvoted because your own statement contradicts itself. You're so touchy about the cancer thing that you're complaining about it.

I'm touchy about the cancer thing because I had my leg amputated and went through chemo for a year.

Getting agitated over a hypothetical example is a bit of an overreaction.

Re: Encrypted SNI Comes to Firefox Nightly

#155

Post by dagenix » Tue, Oct 30, 2018, 5:00 AM UTC

Simon_says wrote: post #154

comesee wrote: post #134

Earlier quoted context omitted.

I'm touchy about the cancer thing because I had my leg amputated and went through chemo for a year.

Getting agitated over a hypothetical example is a bit of an overreaction.

I don't know comesee - but their saying it isn't at all hypothetical for them. It's called basic human decency - maybe give it a try?