LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-03-2020, 08:33 AM   #1
hifi100
Member
 
Registered: Sep 2016
Location: India
Distribution: Arch Linux
Posts: 357

Rep: Reputation: Disabled
If I use DNS over HTTPS can my ISP still track my browsing habits ?


I just found this article https://www.comparitech.com/blog/vpn...wsing-history/

I don't have the money to buy a VPN subscription but I have enabled DNS over HTTPS on Firefox.

Q1) Can my ISP still track my browsing habits if DNS over HTTPS is enabled ?

Edit : Are there any tests available online that will confirm my privacy status ?

Last edited by hifi100; 12-03-2020 at 08:36 AM.
 
Old 12-03-2020, 09:36 AM   #2
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,475

Rep: Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553
Quote:
Originally Posted by hifi100 View Post
Q1) Can my ISP still track my browsing habits if DNS over HTTPS is enabled ?
Yes, just because you're using a different DNS method you'll still be requesting the traffic over their network so they'll know the IP of the servers you're accessing.
 
Old 12-03-2020, 09:43 AM   #3
hifi100
Member
 
Registered: Sep 2016
Location: India
Distribution: Arch Linux
Posts: 357

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by TenTenths View Post
Yes, just because you're using a different DNS method you'll still be requesting the traffic over their network so they'll know the IP of the servers you're accessing.
So if I want to keep my browsing habits private is VPN the only option ?
 
Old 12-03-2020, 09:45 AM   #4
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,475

Rep: Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553
Quote:
Originally Posted by hifi100 View Post
So if I want to keep my browsing habits private is VPN the only option ?
Pretty much, although your VPN provider will also know what sites you're visiting.
 
Old 12-03-2020, 09:47 AM   #5
hifi100
Member
 
Registered: Sep 2016
Location: India
Distribution: Arch Linux
Posts: 357

Original Poster
Rep: Reputation: Disabled
Thanks.
 
Old 12-03-2020, 05:26 PM   #6
zeebra
Senior Member
 
Registered: Dec 2011
Distribution: Slackware
Posts: 1,832
Blog Entries: 17

Rep: Reputation: 638Reputation: 638Reputation: 638Reputation: 638Reputation: 638Reputation: 638
Quote:
Originally Posted by hifi100 View Post
So if I want to keep my browsing habits private is VPN the only option ?
Torbrowser might be another option. As I understand it routes traffic to a virtual P2P network which then fetches and sends. So, your ISP should be able to see you connecting to others that relay the information, not what exactly you connect too or are doing.
 
Old 12-03-2020, 06:19 PM   #7
scasey
LQ Veteran
 
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,732

Rep: Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212
An aside: I doubt that your ISP cares what you connect to with your browser. Sure they could see it, but I’d bet they don’t even look at or log what you’re doing..
 
Old 12-04-2020, 04:48 AM   #8
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,475

Rep: Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553
Quote:
Originally Posted by scasey View Post
An aside: I doubt that your ISP cares what you connect to with your browser. Sure they could see it, but I’d bet they don’t even look at or log what you’re doing..
Never let the reality get in the way of a tinfoil hat!
 
1 members found this post helpful.
Old 12-04-2020, 05:41 AM   #9
hazel
LQ Guru
 
Registered: Mar 2016
Location: Harrow, UK
Distribution: LFS, AntiX, Slackware
Posts: 7,597
Blog Entries: 19

Rep: Reputation: 4455Reputation: 4455Reputation: 4455Reputation: 4455Reputation: 4455Reputation: 4455Reputation: 4455Reputation: 4455Reputation: 4455Reputation: 4455Reputation: 4455
Quote:
Originally Posted by scasey View Post
An aside: I doubt that your ISP cares what you connect to with your browser. Sure they could see it, but I’d bet they don’t even look at or log what you’re doing..
Your ISP might not care, but if they are located in the USA, they can legally be made to pass that information on request to the Department of Homeland Security.

Last edited by hazel; 12-04-2020 at 01:34 PM.
 
Old 12-04-2020, 07:21 AM   #10
zeebra
Senior Member
 
Registered: Dec 2011
Distribution: Slackware
Posts: 1,832
Blog Entries: 17

Rep: Reputation: 638Reputation: 638Reputation: 638Reputation: 638Reputation: 638Reputation: 638
Quote:
Originally Posted by hazel View Post
Your ISP might not care, but if they are located in the USA, they can legally be made to pass that information on request to the Department of Home Security.
The problem is obviously not the ISP's, it's the legal code in the US which seems to allow unwarranted surveillance. I'm pretty sure that's unconstitutional, and way more important for people to pay attention to and protest against. You should only really be subject to surveillance is there is a reasonable ground for it or reasonable suspicion of a crime, and only when a court issues a warrant.

ISP's are just companies trying to make money. The only possible reason they could have to keep an eye on your activities and use these, would be to profile you for marketing and such, which should obviously be illegal unless you opt in, and probably is illegal currently (not sure). I'm ok with ISP's loggin but not looking at information for x amount of time, to make law enforcement work easier, if a crime has been committed and such logs etc can be looked up and used as evidence.
 
Old 12-04-2020, 08:13 AM   #11
sevendogsbsd
Senior Member
 
Registered: Sep 2017
Distribution: FreeBSD
Posts: 2,252

Rep: Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011
A semi-decent solution, albeit a slow one, is to grab a VPN in another country then use Tor over that VPN. The Tor traffic gets hidden from your ISP. Nothing is perfect in terms of hiding your activities from your ISP.

https://restoreprivacy.com/anonymity-networks/
 
Old 12-04-2020, 12:56 PM   #12
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by scasey View Post
An aside: I doubt that your ISP cares what you connect to with your browser. Sure they could see it, but I’d bet they don’t even look at or log what you’re doing..
Sorry, but that's a little naive.
Never heard of Big Data? Don't you know what hundreds of IT companies make their money with?
And I'm pretty sure ISP's are in for a little bit of that big data money as well, seeing as they're right at the source; they don't even have to rely on web browsers or equip websites with googleanalytics requests or anything.
 
Old 12-04-2020, 01:28 PM   #13
scasey
LQ Veteran
 
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,732

Rep: Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212Reputation: 2212
Quote:
Originally Posted by ondoho View Post
Sorry, but that's a little naive.
Never heard of Big Data? Don't you know what hundreds of IT companies make their money with?
And I'm pretty sure ISP's are in for a little bit of that big data money as well, seeing as they're right at the source; they don't even have to rely on web browsers or equip websites with googleanalytics requests or anything.
Point taken.
And hazel, yes Homeland Security could get that info (We the People need to repeal the Patriot Act, IMO) if the ISP is logging...i
But I think the tinfoil hat is probably the “solution”
 
1 members found this post helpful.
Old 12-09-2020, 06:05 PM   #14
starkid
Member
 
Registered: Jan 2012
Posts: 91

Rep: Reputation: Disabled
You can use ProtonVPN for free, but you get access to only 3 servers, which are always congested, so the service is rather slow.

For five bucks per month, you can access all their servers worldwide on 2 different computers. More options, less congestion.
 
Old 12-09-2020, 07:05 PM   #15
sgosnell
Senior Member
 
Registered: Jan 2008
Location: Baja Oklahoma
Distribution: Debian Stable and Unstable
Posts: 1,943

Rep: Reputation: 542Reputation: 542Reputation: 542Reputation: 542Reputation: 542Reputation: 542
I use RiseUp VPN, but RiseUp isn't for everyone.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Is this Counterproductive? DNS over HTTPS and DNS over TLS PROBLEMCHYLD Linux - Security 0 06-08-2020 02:45 PM
LXer: DNS-over-HTTPS will eventually roll out in all major browsers, despite ISP opposition LXer Syndicated Linux News 0 11-09-2019 02:27 AM
LXer: Still fuming over HTTPS mishap, Google makes Symantec an offer it can't refuse LXer Syndicated Linux News 0 10-29-2015 08:43 PM
IPROUTE2 - Load balance over two ISP connections breaks HTTPS bonowax Linux - Networking 3 05-15-2015 05:23 AM
RH8.0 can't use ISP's DNS through DHCP over DSL behind NetGear sobRegReqd Linux - Networking 5 12-16-2002 09:27 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:16 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration