[SOLVED] ISP Tracking

Hello,

I’m fairly new to 1.1.1.1 and I wanted to ask a few questions to clear my mind.

If I change my router’s DNS to 1.1.1.1 (Primary) and 1.0.0.1 (Secondary) will my ISP still be able
to view what sites I visit? I know that if I visit a site with a SSL then they can only see the domain
(https://securewebpage.com/) and if I visit without SSL they can see the other parts (http://unsecurewebpage.com/secretpage). But can my ISP see what I visit if I swap from their DNS
to Cloudflare’s DNS?

Thanks.
Keelan

Regular DNS is not encrypted, so your ISP could still track what you request. If you want to avoid that as well, you would need to switch to DNS-over-HTTPS which will encrypted that channel too.

Sorry, this kind of confused me a little.

Is Cloudflare’s 1.1.1.1 DNS DNS-over-HTTPS? or Regular DNS?

Both, you can add it as regular resolver or use it as DoH.

Oh sweet! Thanks :slight_smile: I have privacy issues since I run a business that is competitive to the ISP that I’m currently using and it would be a bummer if they were tracking everything I was doing.

Kind Regards.
Keelan

One other note: We’re only talking about DNS privacy here. Your ISP can still observe anything sent/received over HTTP, and the hostname (but nothing else) sent over HTTPS. The same applies to other types of traffic, if you use IMAP they could read your username/password and any email you transmit, if you use encryption then they can tell what host/service you are connecting to but they can’t access any content.

This assumes an ISP acting maliciously enough to active capture and inspect traffic, this type of data won’t normally end up in a log for later review unless they’ve taken steps to do so.