logoalt Hacker News

vhcrtoday at 5:13 AM1 replyview on HN

Unless you're using DNS over HTTPS they can see the unencrypted DNS traffic. There's also Encrypted Client Hello, but they can also see which IP you're connecting to.


Replies

dwedgetoday at 10:33 AM

Also if the domain responds on the bare IP or there's nothing else they've seen on that IP it's a fair assumption. This is without even wondering if their router sends telemetry