How does using third party DNS like cloudfare DNS helps to protect privacy when ultimately ALL traffics goes through ISP? ISP is the middle man between me and the internet. Since DNS is in plain-text and all traffic goes through ISP, thus they are still able to see the request. Only at HTTPS level they cant see anything at all. Am i missing something?

  • With HTTPS, server hostname is still leaked from SNI. – multithr3at3d May 22 '18 at 12:59

Cloudflare's setup supports DNS over TLS as can be read on their website, so that traffic can be encrypted and thus not visible to your ISP.

  • okay then how about Google DNS or a third party DNS that does not support DNS over TLS. If thats the case, it would be still visible right? – Killney May 22 '18 at 8:22
  • lastly, by default, DNS over TLS on cloudfare is enabled? – Killney May 22 '18 at 8:25
  • You're diverging from your original question now. But yes, your ISP can view your DNS traffic if you don't use DNS over TLS. There may be regulations in place which prevent your ISP from inspecting traffic, depeding on the country you live in. If DNS over TLS is preferred is totally dependent on the client which does the queries. – Teun Vink May 22 '18 at 8:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.