throwaway54235 | 5 years ago | on: Improving DNS Privacy with Oblivious DoH
throwaway54235's comments
throwaway54235 | 5 years ago | on: Improving DNS Privacy with Oblivious DoH
The only solution is onion routing AKA Tor and similar.
throwaway54235 | 5 years ago | on: Improving DNS Privacy with Oblivious DoH
REMINDER: Research proves that it's easy to correlate IP addresses in HTTP[S] connections with the domain you are connecting to with a very high success rate.
You can resolve the websites from the Alexa top 100k list and create a ipaddr -> website map that will successfully apply to 90% of Internet traffic without ambiguity.
A lot of research papers also show how easy it is to fingerprint and detect a TLS handshake.
Assuming the SNI problem is going to be solved, the other problems are still here.
TL;DR: use Tor.
throwaway54235 | 5 years ago | on: Packaging Kubernetes for Debian
I worked on one of the large commercial projects that offers OS-packaged k8s.
The customers were screaming for it. They want a simpla and reliable way to deploy k8s without a team of specialist, and the guarantee to receive security updates for years without having to upgrade to a new version.
page 1
The server IP address can be easily correlated with the domain for 90% of Internet traffic.