<story><title>The UK’s Secretive Web Surveillance Program Is Ramping Up</title><url>https://www.wired.com/story/internet-connection-records-uk-surveillance/</url></story><parent_chain></parent_chain><comment><author>DethNinja</author><text>In my opinion, most of the governments must have obtained access to numerous Certificate Authority private keys by now. As a result, they would not only be logging DNS records but also the entire unencrypted data transfer.&lt;p&gt;I think lesson to be learned here is that centralized systems such as the internet, due to CAs (including Cloudflare) and ISPs, are unsuitable for private communications.&lt;p&gt;It is so sad that so many people won&amp;#x27;t experience late 1980s and early 1990s era of the internet, which was devoid of extensive surveillance and censorship.&lt;p&gt;Hopefully, humanity will somehow figure out a superior, decentralized communications platform to ensure privacy. However, the current internet offers no such guarantees.&lt;p&gt;My recommendation at this stage is to assume that government and supranational organizations control the entirety of the internet and act accordingly as if internet had no privacy.</text></comment>
<story><title>The UK’s Secretive Web Surveillance Program Is Ramping Up</title><url>https://www.wired.com/story/internet-connection-records-uk-surveillance/</url></story><parent_chain></parent_chain><comment><author>sysadm1n</author><text>&amp;gt; ICRs can include that you visited Wired.com but not that you read this individual article&lt;p&gt;So obviously it&amp;#x27;s just DNS records they look at, unless they look at other metadata? I know that DoH encrypts your DNS queries, but still leaks the site you&amp;#x27;re visiting via the TLS handshake.&lt;p&gt;There are further developments in this space which mitigate this weakspot, namely ECH[0] and Oblivious DoH[1]. Combine a VPN that you trust with these and you&amp;#x27;ve essentially gone dark to this sort of surveillance apparatus.&lt;p&gt;[0] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;blog.cloudflare.com&amp;#x2F;encrypted-client-hello&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;blog.cloudflare.com&amp;#x2F;encrypted-client-hello&amp;#x2F;&lt;/a&gt;&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;blog.cloudflare.com&amp;#x2F;oblivious-dns&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;blog.cloudflare.com&amp;#x2F;oblivious-dns&amp;#x2F;&lt;/a&gt;</text></comment>