ISP tracking
Internet Service Providers (ISPs) monitor user activity by observing DNS requests (revealing visited domains), even when HTTPS encrypts content (passwords, emails). This makes users “the product” sold for advertising.
- ISP tracking mechanism: Logs domain names resolved via unencrypted DNS, bypassing HTTPS content encryption
- VPNs are oversold: Often paid services with logging risks; not a free or perfect privacy solution
- Encrypted DNS (e.g., DNS over HTTPS/TLS) provides a free, effective alternative:
- Encrypts DNS queries to prevent ISP visibility
- Stops being “the product” without cost or trust issues
- Complements HTTPS by protecting domain-level privacy
- Key insight: HTTPS ≠ privacy (only secures content), while Encrypted DNS secures domain metadata
Related concepts:
- HTTPS: Encrypts content but not domain requests
- VPNs: Often marketed as privacy tools but introduce new risks
- Encrypted DNS: Recommended free solution for domain-level privacy
2026 04 14 Encrypted dns dave garage
Source Notes
- 2026-04-14: [[lab-notes/2026-04-14-Optimizing-AI-Costs-and-Privacy-with-Local-Open-Source-Models-and-Hybr|“But OpenClaw is expensive…“]]