Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

ISPs can presumably correlate the Google query string with the request following the response to the goto and so make a search index? I guess they would charge too much.

Do any large ISPs use visit data to feed into a search index?

 help



ISPs do not see query strings since Google uses HTTPS. ISPs can only see the domain and IP address you are connecting to.

Can they even see the domain? Assuming you're not using the ISP's DNS of course.

Unless you're using DNS over HTTPS they can see the unencrypted DNS traffic. There's also Encrypted Client Hello, but they can also see which IP you're connecting to.

Also if the domain responds on the bare IP or there's nothing else they've seen on that IP it's a fair assumption. This is without even wondering if their router sends telemetry

Most people use the ISP DNS, but even if they don't, the Domain to IP is public information.

There's even a reverse pointer query that can be made to get a domain to IP from a legacy ARPA TLD, although it isn't 100% robust.


Doh, of course.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: