Hacker News new | past | comments | ask | show | jobs | submit login

This is all theater to give people a warm-fuzzy about the way things are.

Other than cock-blocking ISPs, what's the value in end-to-end encryption when one of those ends is a megacorporation that is A) super-friendly with the state security apparatus, and B) ready, willing, and able to sell you out to the highest bidder? E2E works great against basement-dwelling h4x0rs, not so much against people with actual power.

I know these companies will swear up and down how secure they are--but security of what? Who audits them? Last I checked, no one.




To be clear, E2E from your-own-server to your-own-server is wonderful. E2E from your google/apple/amazon surveillance device to google/apple/amazon servers is turf guarding.

Say I want to block such-and-such domain. With unencrypted DNS, I put a record in my own resolver, and problem solved. With per-app DNS over HTTPS, my infrastructure is out of the loop, and SV has total control.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: