Noob here. This is probably the most repeated question, but I don’t know the technical terms to make the appropiate digging online, and thought of asking humans before slopping my way around.

I don’t trust my ISP or the government above it.

The ISP remotely manages the local network! So I installed a router of my own and my devices only to that one.

I would like to encrypt (?) anything that goes out of my own router, so my ISP doesn’t evesdrop what I’m doing even if they want to (I know I know… if they really wanted, they could just send friends to my house).

Using Linux, Android GOS, and Pihole. They live under a “picked-up-from-a-shelf” router; and that router under theirs.

(I cannot get a different ISP)

Thanks

  • Auli@lemmy.caEnglish
    0·
    14 hours ago

    I mean all they can really see nowadays is the sni. Only thing isnt encrypted anymore. And yes their is encrypted hello bit nobody seems to be using it.

    Sites are https so that is all encrypted set up DOH or DOT and your DNS is encrypted.

    • entropiclyclaude@lemmy.wtf
      0·
      10 hours ago

      DoH is not as private as you think, that’s just how big tech positioned it.

      DoH encrypts DNS queries between your browser and the DNS resolver, it does not hide your browsing activity from the DoH provider itself.

      Google, cloudflare or any other 3rd party orgs still see your data.

      I have an open source firewall on gitlab if you wanna take a look. Blocks some IPs - I know it’s not much but fuck Palantir - I made it so their site won’t load.

      Blocks 50+ stalkerware apps as well as data broker trackers.

      I want to go back to it so you can wire in through my VPS and build it as a mobile app to block Gemini and Apple Intelligence from scraping your photos and texts and everything to train their models.

    • ☂️-@lemmy.ml
      0·
      13 hours ago

      sni may be enough depending on what a given oppressive isp/government wants to do.