3 ms·
They're unlikely using plain HTTPS for sensitive traffic, as that still divulges what sites you're visiting.
by cwyers 11y ago
They're unlikely using plain HTTPS for sensitive traffic, as that still divulges what sites you're visiting.
- cookiecaper 11y agoTechnically it only divulges which IP addresses you're accessing. The URL, including domain name, in the request is encrypted.
- toast0 11y agoServer Name Identification divulges the hostname (in the clear) during the key exchange.