5 ms·

DNS over HTTPS is the solution here.

• netheril96 4y ago
  SNI is still in the plaintext.
  • vetinari 4y ago
    It it still an improvement; you need to DPI the traffic then, which is more demanding than just logging 53/udp queries.
    • SkyPuncher 4y ago
      Anyone who is trying to invade your privacy is going to do DPI. My prosumer grade harder does DPI without any issue.
• ddalex 4y ago
  Doesn't change the fact that the SNI is sent in clear text.
  • NavinF 4y ago
    https://en.wikipedia.org/wiki/Server_Name_Indication#Encrypted_Client_Hello https://en.wikipedia.org/wiki/Server_Name_Indication#Encrypt...
• deleted 4y ago
  [deleted]