<story><title>Big ISPs aren’t happy about Google’s plans for encrypted DNS</title><url>https://arstechnica.com/tech-policy/2019/09/isps-worry-a-new-chrome-feature-will-stop-them-from-spying-on-you/</url></story><parent_chain><item><author>cj</author><text>Just want to say for the sake of others reading that this comment is exaggerating + generalizing a bit.&lt;p&gt;Everyone is not obsessed with turning data into revenue. Most smaller tech companies (ie. Sub billions in revenue) are not in the game of monetizing data. My feeling is the market exists mostly between very well establish and very large companies (such as ISPs, advertising networks), but that same market doesn’t exist between newer &amp;#x2F; smaller companies that haven’t reached massive scale.&lt;p&gt;To anyone in the EU:  is GDPR something that your non-technical friend will have heard of and knows what it is? Or is it similar to the US, where 75% of people probably haven’t heard of it or if they have, couldn’t say what the regulation does.</text></item><item><author>mtbcoder</author><text>Wholesale data collection has become normalized in the US. For-profits, non-profits, it doesn&amp;#x27;t matter the industry, everyone is obsessed with capturing as much data as possible and believe it&amp;#x27;s just the standard way of business.  No one outside of HN cares about PII or has an understanding of things like GDPR (it&amp;#x27;s just for the Europeans). Consumers are clueless or otherwise feel hopeless.</text></item><item><author>Fnoord</author><text>As a European it baffles me that this is normal in the USA. Why is this even legal? This should be PII.</text></item><item><author>foobiekr</author><text>Netflow data, DNS capture, enrichment of cell tower access data (location), reporting on non-usage (idle time, tracking), Bill and household information, credit account usage, etc. SPs are huge sellers in this market.&lt;p&gt;We still need to encrypt the accessed resource and DNS queries everywhere.&lt;p&gt;Even once that’s done, things like opencaching will be used by SPs to gather tons of data where they participate.</text></item><item><author>z9e</author><text>They definitely are. I know for a fact that they are running massive Hadoop clusters storing information on DNS records involved in their customer traffic. If I recall correctly they mirror a lot of the traffic to analytics environments.</text></item><item><author>kelnos</author><text>While I don&amp;#x27;t particularly trust Google all that much anymore, the fact that ISPs even have an &lt;i&gt;opinion&lt;/i&gt; on this is a smoking gun that they&amp;#x27;re doing sketchy things with DNS data.  There is no actual technical reason why they should care if you use their DNS servers or something else, even a private, encrypted DNS service.</text></item></parent_chain><comment><author>lultimouomo</author><text>Everyone in the EU has heard of it, at least for the fact that everyone received a whole bunch of email that mentioned it on May 25th 2018. I&amp;#x27;d say a lot of people know that &amp;quot;it&amp;#x27;s about privacy&amp;quot;; the actual understanding obviously varies.</text></comment>
<story><title>Big ISPs aren’t happy about Google’s plans for encrypted DNS</title><url>https://arstechnica.com/tech-policy/2019/09/isps-worry-a-new-chrome-feature-will-stop-them-from-spying-on-you/</url></story><parent_chain><item><author>cj</author><text>Just want to say for the sake of others reading that this comment is exaggerating + generalizing a bit.&lt;p&gt;Everyone is not obsessed with turning data into revenue. Most smaller tech companies (ie. Sub billions in revenue) are not in the game of monetizing data. My feeling is the market exists mostly between very well establish and very large companies (such as ISPs, advertising networks), but that same market doesn’t exist between newer &amp;#x2F; smaller companies that haven’t reached massive scale.&lt;p&gt;To anyone in the EU:  is GDPR something that your non-technical friend will have heard of and knows what it is? Or is it similar to the US, where 75% of people probably haven’t heard of it or if they have, couldn’t say what the regulation does.</text></item><item><author>mtbcoder</author><text>Wholesale data collection has become normalized in the US. For-profits, non-profits, it doesn&amp;#x27;t matter the industry, everyone is obsessed with capturing as much data as possible and believe it&amp;#x27;s just the standard way of business.  No one outside of HN cares about PII or has an understanding of things like GDPR (it&amp;#x27;s just for the Europeans). Consumers are clueless or otherwise feel hopeless.</text></item><item><author>Fnoord</author><text>As a European it baffles me that this is normal in the USA. Why is this even legal? This should be PII.</text></item><item><author>foobiekr</author><text>Netflow data, DNS capture, enrichment of cell tower access data (location), reporting on non-usage (idle time, tracking), Bill and household information, credit account usage, etc. SPs are huge sellers in this market.&lt;p&gt;We still need to encrypt the accessed resource and DNS queries everywhere.&lt;p&gt;Even once that’s done, things like opencaching will be used by SPs to gather tons of data where they participate.</text></item><item><author>z9e</author><text>They definitely are. I know for a fact that they are running massive Hadoop clusters storing information on DNS records involved in their customer traffic. If I recall correctly they mirror a lot of the traffic to analytics environments.</text></item><item><author>kelnos</author><text>While I don&amp;#x27;t particularly trust Google all that much anymore, the fact that ISPs even have an &lt;i&gt;opinion&lt;/i&gt; on this is a smoking gun that they&amp;#x27;re doing sketchy things with DNS data.  There is no actual technical reason why they should care if you use their DNS servers or something else, even a private, encrypted DNS service.</text></item></parent_chain><comment><author>iagovar</author><text>No one heard about it, at least in Spain. My father asked me about it because he heard it on the news, but I&amp;#x27;d say that 99% of my non-tech friends have no idea of what it is about. Anyway, I work for a large telco and they are very paranoid liabilities involving data. It&amp;#x27;s a behemoth, so you wouldn&amp;#x27;t expect them to be this careful.&lt;p&gt;As far as I remember, they still sell some anonymized data (they had some demos on how to plan public transport with location data) and I&amp;#x27;d bet they are not doing much with DNS data.</text></comment>