this post was submitted on 13 Mar 2026
57 points (98.3% liked)

Privacy

47127 readers
1389 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS
 

Noob here. This is probably the most repeated question, but I don't know the technical terms to make the appropiate digging online, and thought of asking humans before slopping my way around.

I don't trust my ISP or the government above it.

The ISP remotely manages the local network! So I installed a router of my own and my devices only to that one.

I would like to encrypt (?) anything that goes out of my own router, so my ISP doesn't evesdrop what I'm doing even if they want to (I know I know... if they really wanted, they could just send friends to my house).

Using Linux, Android GOS, and Pihole. They live under a "picked-up-from-a-shelf" router; and that router under theirs.

(I cannot get a different ISP)

Thanks

you are viewing a single comment's thread
view the rest of the comments
[–] Auli@lemmy.ca 3 points 21 hours ago (2 children)

I mean all they can really see nowadays is the sni. Only thing isnt encrypted anymore. And yes their is encrypted hello bit nobody seems to be using it.

Sites are https so that is all encrypted set up DOH or DOT and your DNS is encrypted.

[–] entropiclyclaude@lemmy.wtf 3 points 17 hours ago (1 children)

DoH is not as private as you think, that’s just how big tech positioned it.

DoH encrypts DNS queries between your browser and the DNS resolver, it does not hide your browsing activity from the DoH provider itself.

Google, cloudflare or any other 3rd party orgs still see your data.

I have an open source firewall on gitlab if you wanna take a look. Blocks some IPs - I know it’s not much but fuck Palantir - I made it so their site won’t load.

Blocks 50+ stalkerware apps as well as data broker trackers.

I want to go back to it so you can wire in through my VPS and build it as a mobile app to block Gemini and Apple Intelligence from scraping your photos and texts and everything to train their models.

[–] Ascendor@discuss.tchncs.de 2 points 17 hours ago* (last edited 17 hours ago)

Well how could it? Of course the DNS provider needs to know the domain you want to look up - otherwise how would they be able to look it up?

Still it would fulfill the OP's wish: He wants to hide traffic from his ISP, so if he chooses a DNS resolver other than his ISP, and encrypt transmission, goal is achieved.

[–] umbrella@lemmy.ml 2 points 20 hours ago

sni may be enough depending on what a given oppressive isp/government wants to do.