Firefox to stop ISPs from tracking the websites you visit, from today
1–10 of 10 posts
Re: Firefox to stop ISPs from tracking the websites you visit, from today
#2Re: Firefox to stop ISPs from tracking the websites you visit, from today
#3The headline is factually incorrect. The ISPs of DoH users can still happily see user's destination IPs and hostnames (via SNI, even when the traffic goes to a shared cloudflare IP).
Re: Firefox to stop ISPs from tracking the websites you visit, from today
#4The headline is factually incorrect. The ISPs of DoH users can still happily see user's destination IPs and hostnames (via SNI, even when the traffic goes to a shared cloudflare IP).
Firefox implemented ESNI, which encrypts the hostnames in the SNI handshake, last year.
Re: Firefox to stop ISPs from tracking the websites you visit, from today
#5The headline is factually incorrect. The ISPs of DoH users can still happily see user's destination IPs and hostnames (via SNI, even when the traffic goes to a shared cloudflare IP).
Yup. This can be fixed by enabling ESNI (network.security.esni.enabled in about:config), I don't see why they aren't pushing that change at the same time.
Edit: ESNI is still a draft, definitely not a safe default.
Re: Firefox to stop ISPs from tracking the websites you visit, from today
#6The headline is factually incorrect. The ISPs of DoH users can still happily see user's destination IPs and hostnames (via SNI, even when the traffic goes to a shared cloudflare IP).
Firefox implemented ESNI, which encrypts the hostnames in the SNI handshake, last year. https://blog.cloudflare.com/encrypted-sni/
I forced a reaload of all my tabs (dozens), while sniffing my traffic. Not a single one used encrypted sni.
Re: Firefox to stop ISPs from tracking the websites you visit, from today
#7The headline is factually incorrect. The ISPs of DoH users can still happily see user's destination IPs and hostnames (via SNI, even when the traffic goes to a shared cloudflare IP).
Yup. This can be fixed by enabling ESNI (network.security.esni.enabled in about:config), I don't see why they aren't pushing that change at the same time. Edit: ESNI is still a draft, definitely not a safe default.
Because Firefox's move is a media stunt in order to get them a lot of positive coverage and paint them as a "privacy-focused" browser.
Re: Firefox to stop ISPs from tracking the websites you visit, from today
#8The headline is factually incorrect. The ISPs of DoH users can still happily see user's destination IPs and hostnames (via SNI, even when the traffic goes to a shared cloudflare IP).
Firefox implemented ESNI, which encrypts the hostnames in the SNI handshake, last year. https://blog.cloudflare.com/encrypted-sni/
IP will never be hidden.
Re: Firefox to stop ISPs from tracking the websites you visit, from today
#9Earlier quoted context omitted.
Yup. This can be fixed by enabling ESNI (network.security.esni.enabled in about:config), I don't see why they aren't pushing that change at the same time. Edit: ESNI is still a draft, definitely not a safe default.
Because Firefox's move is a media stunt in order to get them a lot of positive coverage and paint them as a "privacy-focused" browser.
Not only that, Firefox have such a tiny percent if the market that anything they do, that could benefit Google, is just better to Google then to Firefox.
Re: Firefox to stop ISPs from tracking the websites you visit, from today
#10Earlier quoted context omitted.
Firefox implemented ESNI, which encrypts the hostnames in the SNI handshake, last year. https://blog.cloudflare.com/encrypted-sni/
IP will never be hidden.
In the Mozilla/Cloudflare brave new world, Cloudflare is front-ending and MITMing all HTTPs in any case... so the IP isn't informative.