60
Protect myself from my ISP? (lemmy.world)
submitted 8 months ago by to c/privacy@lemmy.ml
35 comments fedilink hide all child comments
 

Noob here. This is probably the most repeated question, but I don't know the technical terms to make the appropiate digging online, and thought of asking humans before slopping my way around.

I don't trust my ISP or the government above it.

The ISP remotely manages the local network! So I installed a router of my own and my devices only to that one.

I would like to encrypt (?) anything that goes out of my own router, so my ISP doesn't evesdrop what I'm doing even if they want to (I know I know... if they really wanted, they could just send friends to my house).

Using Linux, Android GOS, and Pihole. They live under a "picked-up-from-a-shelf" router; and that router under theirs.

(I cannot get a different ISP)

Thanks

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 8 months ago (2 children)

I mean all they can really see nowadays is the sni. Only thing isnt encrypted anymore. And yes their is encrypted hello bit nobody seems to be using it.

Sites are https so that is all encrypted set up DOH or DOT and your DNS is encrypted.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 3 points 8 months ago (1 child)

    DoH is not as private as you think, that’s just how big tech positioned it.

    DoH encrypts DNS queries between your browser and the DNS resolver, it does not hide your browsing activity from the DoH provider itself.

    Google, cloudflare or any other 3rd party orgs still see your data.

    I have an open source firewall on gitlab if you wanna take a look. Blocks some IPs - I know it’s not much but fuck Palantir - I made it so their site won’t load.

    Blocks 50+ stalkerware apps as well as data broker trackers.

    I want to go back to it so you can wire in through my VPS and build it as a mobile app to block Gemini and Apple Intelligence from scraping your photos and texts and everything to train their models.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 8 months ago*

    Well how could it? Of course the DNS provider needs to know the domain you want to look up - otherwise how would they be able to look it up?

    Still it would fulfill the OP's wish: He wants to hide traffic from his ISP, so if he chooses a DNS resolver other than his ISP, and encrypt transmission, goal is achieved.

  • permalink
  • fedilink
  • source
  • parent