DNS is the way your browser figures out what server to connect to when you type in "thedonald.win" or "google.com" - basically like if you told someone to visit "McDonalds" they'd have to look up the actual address first
HTTPS - Hypertext Transfer Protocol (secure)
HTTPS is one way (and the most common way) for your browser to communicate with a web server. Every web server uses HTTP (the insecure / old variant) or HTTPS.
Normally, DNS is unencrypted when it is sent over the internet, so theoretically the network owner at a company, or your ISP could read that DNS request, block it, and/or see what website you're trying to visit.
DNS over HTTPS is a new standard that encrypts DNS requests so nobody except for the DNS server (basically the address book) can see what website you're trying to visit.
With a combination of DNS over HTTPS and HTTPS to the actual web server itself, there is no way for the network owner or an ISP to determine what website you're visiting, or to try to block access to the websites you're visiting without blocking access to the internet completely.
A thread would probably be helpful, also including tips and recommendations for general online security. I also have a tech background, so I am aware of the amount of data is collected by websites and browsers, and how to mitigate a lot of it. Many people here most likely don't know the sheer amount of data collected and how it is done.
For those interested in securing your browser better, I recommend using Firefox as a base and installing the following extensions:
uBlock Origin - Ad Blocker. Ads are not only annoying, they often include tracking scripts, and even if they don't, the ad agency (often Google) sees your IP address and the website you are on every time a page with an ad is loaded. An added benefit is not giving money to leftist sites. (you can whitelist sites you want to support) uBlock Origin is also capable of blocking all social media buttons, which open up opportunities for the social media companies to track you.
Decentraleyes - Many websites use common resources in order to make their developer's lives easier. Most of the time, these resources are hosted on a content delivery network (CDN) in order to offer fast load times. These CDNs can also log your IP address and referrer page whenever one of these resources are loaded. Decentraleyes stores the resources on your local disk, so the next time a webpage needs the resource, it can pull it from disk instead of loading it from the web.
Facebook Container - if you must use Facebook, use this with it. FB Container "quarantines" Facebook so other sites cannot see you are logged into Facebook.
What about fingerprints by canvas? I was trying to figure out the best defense but didn't trust the Firefox addons. Seems to me the addons that add random noise to the canvas image are they way to go. Which ones are safe?
DoHTTPS: DNS over HTTPS.
DNS is the way your browser figures out what server to connect to when you type in "thedonald.win" or "google.com" - basically like if you told someone to visit "McDonalds" they'd have to look up the actual address first
HTTPS - Hypertext Transfer Protocol (secure)
HTTPS is one way (and the most common way) for your browser to communicate with a web server. Every web server uses HTTP (the insecure / old variant) or HTTPS.
Normally, DNS is unencrypted when it is sent over the internet, so theoretically the network owner at a company, or your ISP could read that DNS request, block it, and/or see what website you're trying to visit.
DNS over HTTPS is a new standard that encrypts DNS requests so nobody except for the DNS server (basically the address book) can see what website you're trying to visit.
With a combination of DNS over HTTPS and HTTPS to the actual web server itself, there is no way for the network owner or an ISP to determine what website you're visiting, or to try to block access to the websites you're visiting without blocking access to the internet completely.
We need more of this stuff here.
In what form? Should I make a thread maybe?
A thread would probably be helpful, also including tips and recommendations for general online security. I also have a tech background, so I am aware of the amount of data is collected by websites and browsers, and how to mitigate a lot of it. Many people here most likely don't know the sheer amount of data collected and how it is done.
For those interested in securing your browser better, I recommend using Firefox as a base and installing the following extensions:
uBlock Origin - Ad Blocker. Ads are not only annoying, they often include tracking scripts, and even if they don't, the ad agency (often Google) sees your IP address and the website you are on every time a page with an ad is loaded. An added benefit is not giving money to leftist sites. (you can whitelist sites you want to support) uBlock Origin is also capable of blocking all social media buttons, which open up opportunities for the social media companies to track you.
Decentraleyes - Many websites use common resources in order to make their developer's lives easier. Most of the time, these resources are hosted on a content delivery network (CDN) in order to offer fast load times. These CDNs can also log your IP address and referrer page whenever one of these resources are loaded. Decentraleyes stores the resources on your local disk, so the next time a webpage needs the resource, it can pull it from disk instead of loading it from the web.
Facebook Container - if you must use Facebook, use this with it. FB Container "quarantines" Facebook so other sites cannot see you are logged into Facebook.
Privacy Badger - smart tracker blocker
Great list, only thing I'd add is HTTPS Everywhere.
What about fingerprints by canvas? I was trying to figure out the best defense but didn't trust the Firefox addons. Seems to me the addons that add random noise to the canvas image are they way to go. Which ones are safe?