How does using third party DNS like cloudfare DNS helps to protect privacy when ultimately ALL traffics goes through ISP? ISP is the middle man between me and the internet. Since DNS is in plain-text and all traffic goes through ISP, thus they are still able to see the request. Only at HTTPS level they cant see anything at all. Am i missing something?

  • With HTTPS, server hostname is still leaked from SNI. May 22, 2018 at 12:59

1 Answer 1


Cloudflare's setup supports DNS over TLS as can be read on their website, so that traffic can be encrypted and thus not visible to your ISP.

  • okay then how about Google DNS or a third party DNS that does not support DNS over TLS. If thats the case, it would be still visible right?
    – Killney
    May 22, 2018 at 8:22
  • lastly, by default, DNS over TLS on cloudfare is enabled?
    – Killney
    May 22, 2018 at 8:25
  • You're diverging from your original question now. But yes, your ISP can view your DNS traffic if you don't use DNS over TLS. There may be regulations in place which prevent your ISP from inspecting traffic, depeding on the country you live in. If DNS over TLS is preferred is totally dependent on the client which does the queries.
    – Teun Vink
    May 22, 2018 at 8:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .