Your Fancy DNS Tricks Won’t Give You Privacy
Encrypted DNS, Pi-hole, Unbound, Cloudflare, and Quad9 can hide or reduce DNS exposure, but that does not automatically stop your ISP from seeing which websites you visit. In this hands-on test, David uses a Raspberry Pi, Python scripts, and a network tap to show how an ISP-like observer can still log website destinations through TLS/SNI traffic, even when DNS queries are hidden. We test multiple setups, including DNS over HTTPS, Pi-hole, Unbound, Cloudflare, and browser secure DNS settings, then compare what disappears from DNS logs versus what still shows up in live connection metadata. If you think encrypted DNS alone gives you browsing privacy, this demonstration may change how you think about ISP tracking, website blocking, and the limits of DNS privacy. // Python scripts // You can get the python scripts from GitHub here: DNS Monitor: https://github.com/davidbombal/sni-dn... SNI Monitor: https://github.com/davidbombal/sni-dn... // Previous video // How your ISP tracks you (even with encrypted DNS): • How your ISP tracks you (even with encrypt... // YouTube Video REFERENCE // How your ISP tracks you (even with encrypted DNS): • How your ISP tracks you (even with encrypt... // David's SOCIAL // Discord: / discord X: / davidbombal Instagram: / davidbombal LinkedIn: / davidbombal Facebook: / davidbombal.co TikTok: / davidbombal YouTube: / @davidbombal Spotify: https://open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: https://podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU // 0:00 - Introduction 02:13 - SNI vs DNS Monitoring 03:44 - Traffic Examples 06:10 - Capture traffic with Wireshark 08:02 - Firefox Settings 08:32 - Comparing Traffic Post Encryption 10:30 - DNS settings 11:05 - Comparing Traffic Again 13:40 - Using pi-hole 14:58 - Firefox Settings Variation 15:36 - Comparing Traffic Again 16:16 - Using an Unbound Server 17:10 - Comparing Traffic Again 18:33 - Chrome Demonstration 19:48 - Comparing Traffic Again 20:43 - Using Cloudflare 21:16 - Comparing Traffic Again 22:03 - More Examples 23:50 - Outro Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #dns #cloudflare #pihole

How your ISP tracks you (even with encrypted DNS)

The Invisible Phone: Ditch PSTN Forever – No IMEI, No IMSI, No KYC, Total Stealth Calling

Don't Buy a Scanner... Build One

1 Button Press Can Hack Millions of Cars

The VPN Arms Race - They Block, We Figure Out a Counter

OPNsense Ad Blocking Better Than Expected | Full Setup

Have you been hacked? Hacker explains how to find out!

How ISPs Bypass Encrypted DNS to Track All Traffic

Passkeys Explained: Are They Actually Better Than Passwords?

16 secs to break it! 😱 70% of real world WiFi networks owned!

Fighting back against BIG TECH with a Raspberry Pi... (Pi-hole, Unbound, Tailscale + more)

URGENT UPDATE - Iran War Expert: A Mass Casualty Attack Is Coming! | Robert Pape

How The FBI Finds Your REAL IP Address

I Hacked This Temu Router. What I Found Should Be Illegal.

How to Track the People Tracking YOU

Pi-hole Isn't Blocking Half Your Devices (UniFi Fix)

DO NOT BUY: LG’s Spyware TVs, Monitors, and Wiretapping Concerns

Maybe It’s Time to Leave Windows

Technitium: The Self-Hosted DNS Server You Should Run

