4.03.2018

key change needed to make your data private is called DNS over HTTPS


These days, you may wish you had a magic switch you could flip to keep your data more secure.
The misuse of Facebook user data by Cambridge Analytica is only the latest consumer privacy flap to create outrage. Remember the Equifax hack? That affected more than 230 million people. And in 2017, US lawmakers reversed Obama-era rules that forbade your internet service provider from making money off your
web-browsing history.
Suddenly internet users are realizing that their internet service providers have been amassing huge troves of data on all the websites they visit. People aren't happy about that, and it seems there's nothing we can do about it.
So a magic switch would be nice. And that's essentially what website performance and security giant Cloudflare set out to create, starting with its new tool called 1.1.1.1. Announced Sunday, 1.1.1.1 aims to speed up your internet connection and make it harder for your ISP to collect your browsing history. In combination with a potential change in the way your browser works, the tool could eventually stop your ISP from accessing that information altogether. That's big news at a time when consumers are demanding more control of their data.
That other key change needed to make your data private is called DNS over HTTPS, a proposed standard being shepherded by the Internet Engineering Task Force that would hide information about your web browsing activity under a shroud of encryption. It's not built into the systems you use to go online yet, but Cloudflare is hoping that will change soon.
With 1.1.1.1, internet users can let Cloudflare take over the process of resolving requests to the DNS or Domain Name System. That's the crucial process of matching up a URL -- like facebook.com -- with a website's true location on the internet, called an IP address (for Facebook, that's 157.240.18.35).
Usually your internet service provider takes care of DNS for you. This also happens to be a great way to log every website you visit. Taking that out of your ISP's hands, then, makes it harder for the company to collect your browsing history.
"What many Internet users don't realize is that even if you're visiting a website that is encrypted -- has the little green lock in your browser -- that doesn't keep your DNS resolver from knowing the identity of all the sites you visit," wrote Cloudflare CEO Matthew Prince in a blog post Sunday.
That's what Cloudflare's pitching with its new service, which is free and can be used by changing the settings in your web browsers or operating systems. You can use it on computers, routers and phones. If you type 1.1.1.1 into your web browser, you'll find a website that gives you instructions.
Prince acknowledges that 1.1.1.1 is no silver bullet. Internet service providers still have other tools for sniffing out which websites you visit. That's because some key information about your web-browsing habits is encoded into the bits and bytes that travel over the internet, and ISPs can intercept that information and read it.
Cloudflare is hoping to help solve that problem, too. It's promoting the implementation DNS over HTTPS, which encrypts that data about your web browsing as it flows online.
It'll be up to the makers of web browsers, operating systems and devices to build in support for DNS over HTTPS. If that becomes standard practice, using a DNS service like 1.1.1.1 will cut off your internet service provider from your browsing history for good.
Mozilla is looking into making DNS over HTTPS a feature of its Firefox browser.
"Firefox is the most privacy-centric browser, and we are always looking for new technologies like DNS over HTTPS to ensure we're at the cutting edge of speed, privacy and making life online better," Selena Deckelmann, a senior director of engineering at Mozilla who focuses on Firefox, said in a statement.

No comments:

Post a Comment