Here’s how your ISP tracks every website you visit, and one tool that stops it


Are you concerned about your digital footprint? Does it bother you that anyone listening can observe which websites you visit? Most people don’t know what DNS is or how much information it leaks. I’ll share with you what the problem is and how to fortify yourself against snoopers.

DNS (Domain Name System) is the backbone of the internet. Without it, browser requests would not resolve a domain name (e.g., howtogeek.com) to an IP address. That’s essential, because the fundamental principles of routing traffic depend upon numbers (IP addresses). However, the designers of DNS did not consider privacy (or security). Consequently, it leaks every website you visit, which mail servers you use, and sometimes a lot more. A snooper can build substantial profiles on all of us, and they do. There is one saving grace, and there’s slow-moving progress in the right direction. Today, I have a solution that’s different from the rest.

An introduction to DNS

The backbone of the internet

This video does an excellent job of explaining how DNS works:

You can see queries do not stop at your DNS server (aka recursive resolver). Further requests occur upstream, incrementally resolving them until they reach the “authoritative nameserver,” which handles domains it controls (called a DNS zone). We will cover the last mile today, the part between your OS (aka stub resolver) and the recursive resolver.

The “last mile” is a term used in telecommunication (from the service provider’s perspective) to describe the last leg between the system and the end-user. Conversely, the (unofficial) term “upstream” refers to all the other links (between the resolver and the nameservers). These words sound awkward together, so they’re worth an explanation.

The woeful problems with DNS

Your packets are showing

The biggest problem with DNS is that the request between the stub resolver (in your OS) and the recursive resolver is unencrypted. These packets contain information about where you shop, where you bank, what times you’re awake, and what you like, watch, and think, and when you do it. Your traffic pattern is so unique that it can fingerprint and track you across networks. So, if you use a VPN, your DNS requests act as a shining beacon, uniquely identifying you. This can occur even with encrypted queries.

Typical DNS requests also take place over connectionless UDP, which does not ensure packet stream integrity. Couple that with a lack of encryption, and they’re alarmingly easy to intercept and manipulate. In fact, it’s common practice for your ISP to do so, forwarding them to their own resolvers or modifying the response. So, if you think you’re using Cloudflare’s DNS, think again. Mass censorship systems also use such tactics: The Great Firewall of China uses deep packet inspection and DNS injection to reroute queries.

It’s important to realize that your DNS requests may traverse many jurisdictions, and often countries and organizations don’t share the same values as you. While some may have ideological differences, others have commercial intent. That’s not limited to foreign countries either. It’s well known that Comcast once redirected its customers to ad-laden web pages upon nonexistent domain (NXDOMAIN) errors.

While you may have nothing to hide, your DNS requests are being intercepted and redirected, which makes you vulnerable to social manipulation and commercial profiling. I don’t know about you, but the unregulated interception of my packets is deeply unsettling.

DNSCrypt to the rescue

Encrypt your data before it goes out

An ASUS Wi-Fi 6E router placed on a box. Credit: Goran Damnjanovic / How-To Geek

We’ve established that unencrypted DNS queries leave them open to interpretation and manipulation, and the strongest solution is always encryption. There are a couple of solutions to do this, with DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) being two. While good and often recommended, they don’t offer the additional features that DNSCrypt does.

DNSCrypt is my go-to choice because it encrypts and pads your queries. Padding is crucial because upstream packets get decrypted, and a snooper with significant resources (such as an ISP) can correlate the encrypted and unencrypted packets by size and timing, making encryption meaningless. Both DoT and DoH have sparse support for it, so it’s often unused. DNSCrypt makes this feature mandatory, so all your packets are resilient against traffic analysis and correlation.

However, it’s the additional relay feature that seals the deal for me. When requested, DNSCrypt will send your encrypted requests through an intermediary (the relay). It can’t read the data, but it knows who made the request. When it forwards the packets, upstream only sees the relay making the request and the request data—which means they know nothing about you.

So DNSCrypt encrypts, pads, and routes your queries through a relay. All three make DNSCrypt the best choice for protecting your privacy.


DNSCrypt isn’t a silver bullet, but it’s an excellent tool if you use it right

Any form of DNS encryption is a step in the right direction. It’s not yet a silver bullet because TLS connections still send a client hello, which contains the domain you’re connecting to (aka the SNI). In addition, the upstream connection is unprotected. If you use a relay, these requests are anonymous, but they are still susceptible to interception on a mass scale. Presently, work is happening to improve the situation, and in time, technologies like DNSSEC and DNSCurve will provide full verification and encryption of replies.

DNSCrypt also doesn’t solve the “client hello” issue, nor the unencrypted upstream. It does protect your immediate requests, your identity, and your habits. It’s not a perfect system, but it’s the best we have at present.

If you’re interested in DNSCrypt, head over to its homepage. If you’re using Linux, have a look at the Arch Wiki. There is also an informational website that includes server details, the specification, and useful tools. You may also be excited to hear that AdGuard provides a DNSCrypt stub resolver, which does additional ad blocking.


NordVPN on Mac (5)


What Your ISP Still Knows About You, Even With a VPN

You’re not as invisible as you think!



Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


Microsoft Excel handles temporal data effectively if you know which formulas to use. The problem is that Excel includes over 20 date and time functions, but most people only ever need a small core set to build powerful, self-updating workflows. These essential date functions turn messy timelines into automated systems you can actually rely on.

All examples in this guide use an Excel table (Ctrl+T) named ProjectTracker (pictured below). To follow along, download a free copy of the Excel workbook containing this table. After you click the link, you’ll find the download button in the top-right corner of your screen.

A structured Excel tracking table containing project tasks, start dates, and due dates.

Excel views your calendar as a massive string of numbers

The secret logic behind spreadsheet dates

Excel stores dates as serial numbers—starting at January 1, 1900—and displays them using date formats. For example, June 1, 2026 is stored internally as 46174. This allows you to perform arithmetic on dates, such as adding 7 to move forward one week.

Excel intentionally treats 1900 as a leap year for compatibility with older spreadsheet systems. This is not historically accurate, but it rarely affects modern workflows unless you’re working with very old date ranges.

Keep your timelines moving with real-time tracking

Creating a live project countdown with TODAY

If you currently update a “Today” cell manually each morning to keep deadlines accurate, Excel can replace that workflow with a dynamic function that always returns the current date.

To create a live countdown that updates automatically as time passes, add a new column with the following name, formula, and formatting:

Column Name

Days Remaining

Formula

=[@[Due Date]]-TODAY()

Number Format

General

When you press Enter, Excel may automatically format the result as a date instead of a number. That’s why you must select the table column and set the format to General in the Number group of the Home tab.

Each task displays the number of days remaining until its due date, with negative values indicating tasks that are already overdue.

The next time you open the workbook, the calculations will refresh and automatically update based on the new day.

Isolate specific time frames by breaking dates into pieces

Structuring reports with MONTH, YEAR, and WEEKDAY

When working with project schedules, full date values like 2026-07-24 are often too detailed for analysis. You may need to group tasks by month, summarize yearly progress, or identify scheduling issues like weekend start dates.

To extract the month, delete the Days Remaining column, then add a new one with these parameters:

Column Name

Month Due

Formula

=MONTH([@[Due Date]])

Number Format

General

Each task returns a numeric month value, such as 6 for June or 7 for July, making it easier to filter and group tasks by month.

To isolate the year for reporting across longer timelines, simply replace MONTH in the formula above with YEAR:

Column Name

Year Due

Formula

=YEAR([@[Due Date]])

Number Format

General

The numeric year component is successfully calculated for every row in the tracking table in Excel.

To identify scheduling issues, such as tasks that begin on weekends, you need a different approach because weekdays are not stored as simple calendar parts like month or year. Instead, Excel assigns each weekday a numeric position based on a selected system.

Here’s what to do in a new column:

Column Name

Weekday Due

Formula

=WEEKDAY([@[Start Date]], 2)

Number Format

General

With the 2 argument, Excel treats Monday as day 1 and Sunday as day 7. Without this argument, Excel uses its default system where Sunday is treated as day 1 and Saturday as day 7.

Each task now returns a number from 1 to 7, where values 6 and 7 correspond to Saturday and Sunday, making weekend starts easy to identify.

The numeric weekday component is successfully calculated for every row in the tracking table in Excel.

OS

Windows, macOS, iPhone, iPad, Android

Free trial

1 month

Microsoft 365 includes access to Office apps like Word, Excel, and PowerPoint on up to five devices, 1 TB of OneDrive storage, and more.


Calculate exact working durations without the weekend clutter

Using NETWORKDAYS to measure real work time

Calendar-based durations often overstate actual work time. A task running from Friday to Monday appears to take four days, even though only two are working days.

So, to calculate true working days between project milestones, add this column:

Column Name

Working Days

Formula

=NETWORKDAYS([@[Start Date]], [@[Due Date]])

Number Format

General

Excel returns the total number of working days between the start and due dates, counting both endpoints when they fall on working days.

To include holidays, create a separate range containing vacation dates (for example, starting in cell F2). Then, select the first Working Days formula cell, and extend the formula to:

=NETWORKDAYS([@[Start Date]], [@[Due Date]], $F$2:$F$5)

Using absolute references ($) ensures the holiday range does not shift when the formula is filled down the table.

When you press Enter, you’ll see that the calculation now excludes both weekends and holidays.

If your workweek is non-standard, use NETWORKDAYS.INTL to define custom weekend rules.

Map future deadlines and end-of-month cutoffs

Using WORKDAY and EOMONTH for automated scheduling

Beyond tracking existing timelines, Excel can generate future dates based on rules such as working durations and billing cycles.

To calculate a projected completion date based on working days, remove the Due Date column, then add these two columns.

Column 1:

Column Name

Expected Duration

Values

Manually enter the number of working days.

Number Format

General

Column 2:

Column Name

Projected Finish

Formula

=WORKDAY([@[Start Date]], [@[Expected Duration]])

Number Format

Date

Excel returns a date representing the expected completion based on the specified number of working days. It automatically skips weekends and returns the next valid working date.

To calculate billing cutoffs that always land on month-end, use this workflow:

Column Name

Billing Cutoff

Formula

=EOMONTH([@[Start Date]], 0)

Number Format

Date

Excel returns the last day of the month for each task, making billing cycles consistent.

Planning ahead with month-based review dates

Shifting dates across months with EDATE

Not all scheduling problems are about counting days. In real project work, you often work in monthly cycles—such as scheduled reviews, audits, or check-ins that repeat at predictable intervals.

For example, if a project phase starts on a given date, and you need to schedule a formal review three months later, Excel has a built-in function designed exactly for this. EDATE shifts a date by a specified number of months while preserving the day of the month when possible.

Here’s how to use it:

Column Name

Review Date

Formula

=EDATE([@[Start Date]], 3)

Number Format

Date

This moves the start date forward by three full months. For example, if the start date is June 1, 2026, Excel returns September 1, 2026.

You can also move backward in time when planning earlier review checkpoints, such as retrospective checks or pre-launch assessments. In those cases, you use a negative value:

=EDATE([@[Start Date]], -2)

Unlike day-based subtraction, EDATE respects calendar structure, making it more reliable than manually shifting dates.


Take control of your spreadsheet timelines

Ignoring Excel’s built-in date tools often leads to hours of manual updates and fragile spreadsheets. By understanding how Excel stores dates and using functions designed to work with them, you can build schedules that update themselves and forecast future milestones automatically. Once you’ve mastered tracking time with formulas, the next step is visualizing it—turn your data into a dynamic timeline that updates as your project evolves.



Source link