On: Comcast Is Lobbying Against DNS Encryption

[pabs3]

You can learn a lot just from the destination IP address:

https://irtf.org/anrw/2019/slides-anrw19-final44.pdf

You need a VPN or Tor to obscure that from your ISP, but your VPN server ISP or your Tor exit node and ISP will always be able to see your destination IP address.

[zzzcpan → pabs3]

So, 95.7% of alexa top million sites are uniquely identifiable just by looking at a set of IP addresses following initial connection.

This is why real privacy is hard and DoH is a joke from technical perspective and evil from power perspective.