Fundamentally even with TLS enabled and encrypting your DNS queries your ISP can still see what websites you are going to. Not what your doing on those sites, but they can see a visit to those sites.
Here’s a video that shows what your ISP can still see.
Fundamentally even with TLS enabled and encrypting your DNS queries your ISP can still see what websites you are going to. Not what your doing on those sites, but they can see a visit to those sites.
Here’s a video that shows what your ISP can still see.
https://www.youtube.com/watch?v=VNdeOpu9BoE
With ECH it can only see ip addresses. Which may be enough in many cases of course, but many sites use CDNs. Not all sites use it though.
Authoritarian enough government would just block connections with ECH and force websites to disable it of course.