Re: When DNS over https become the main
Depends. DoH isn't a full solution as the ISP can still deep inspect the SNI part of the packet to see what website you requested.
ESNI removes this problem (but is not yet widely supported or switched on in broswers), and combined with networks like Cloudflare, the ISP has no idea what website you are trying to reach
https://www.cloudflare.com/ssl/encrypted-sni/
Biting the hand that feeds IT
