On: Firefox’s Trusted Recursive Resolver DNS feature i...

[patrickmcmanus]

right - but we're coming for cleartext sni too:

https://tools.ietf.org/html/draft-rescorla-tls-esni-00

interestingly, something like DoH is a pre-requisite for pulling off esni.

[trumped → patrickmcmanus]

that's great, but are you coming for the ip addresses too (probably the bigger challenge)?

[patrickmcmanus → trumped]

wrt esni the anonymity pool is definitely the set of content that can share the same address pool. In a world with lots of CDNS (and several multi-CDN switching services) this covers a huge amount of content - but I agree - not everything.

[trumped → patrickmcmanus]

If you think about the best/worst case scenario, would you be happy if one CDN would deliver everything? I think that we would be in a worst situation... ideally, I think that everyone would have their own servers and that your ISP would not even be able to see which IP addresses you are talking too (completely decentralized)

[patrickmcmanus → patrickmcmanus]

cdn switchers/sharers are very interesting here. e.g. cedexis

[eastdakota → trumped]

Yes, we are. After ESNI we’re working on DNS IP address randomization.

[trumped → eastdakota]

is that a joke? sorry I don't see how that would help... where could I get more info?