Assuming you don't have ECH, you leak the question (in practical terms) to your ISP, and you leak your question to the DNS provider. With ODoH you plug the latter leak. Plugging that first leak is then still a problem (solved separately) but it's orthogonal to the second.
Even with ECH, where you plug the TLS leak, you have many more holes to plug. IP address might not be shared or might be shared across too few properties, and then traffic profile after the initial connect (to retrieve all the sub-resources) can identify destinations.
It's not limited to the ISP and DNS provider. Thanks to being plaintext it's anyone anywhere along the network path (unless you were already using DoH of course, but sans-ECH is still the entire path regardless).
Anyway I agree with you that plugging leaks is good (notice my adjacent comment). My response there was intended to provide clarification regarding the preceding exchange.
Between so many service operators intentionally purchasing MitM as a service from the cloud providers and the ever increasing proliferation of centralized captcha solutions that work via fingerprinting the entire situation seems increasingly hopeless.
If relay and target are operated by the same provider, there is no collusion. Collusion occurs between 2+ parties. You have stipulated that they are the same party.
The easiest way to become a F500 company is to start as an F5 company, then financialize your whole business, stop innovating, fire anyone effective, and give the executives huge bonuses.
I am saying this quite common and part of it is simply an enterprise tax. Yes vercel breaks it up into a separate charge but that’s their playbook and maybe they can better represent their costs and margin internally. I was only pointing out that SSO is almost always hated because enterprises will want/need it.
the enterprise tax also always includes other features (often you don't care about those -- acknowledged and that's why we call it ssotax because "we" only want the sso portion), and is priced per-seat. it's particularly vile when removal of dark patterns is also gated behind the ssotax/enterprise tier. such as advertising to every user.
the vercel offering is a flat price per month and doesn't bring in other stuff you don't care about. it's very well priced and you pay for just the value you want. it's unfair to lump it into the concept of ssotax.
Yes I understood but let me make my position clearer.
Call it unique but it’s because they are marketing it on a consumption model where they can obfuscate the cost of compute. The upcharge for SSO is still very healthy margins hence my point it’s sadly an enterprise markup because all enterprise will have to use it. Sure it’s not gated behind the enterprise bundle but it still has significant markup.
So I am not sure what I am wrong about it’s more opinion than fact. Yes they break apart costs but I am saying said cost still is inflated. But mea culpa, I am wrong!
I guess one could argue that flat pricing is actually quite expensive, and more akin to ssotax than real value. I guess it depends on the median team size that adds this feature.
GPS antennas typically need power. GPS receivers expect to be the sole power supplier. Simple, cheap signal distribution won't handle this. There are splitters that can allow one downstream port to supply power, but that fails when that single receiver fails. There are other splitters that are active-active. I guess you're claiming that the boxes from Time Machines are such active-active devices.
Those are not cheaper than an antenna! Although from the photo I'm not sure he bought the cheap antennas.
Speaking from experience deploying stratum-1. Not stratum-0, but the same GPS concerns.
