3 ms·
SNI header being sent from the client can probably show even better patterns from the user.
by snug 11y ago
SNI header being sent from the client can probably show even better patterns from the user.
- userbinator 11y agoI've always wondered why that's sent in the clear --- the usual justification is that the hostname needs to be known before the right certificate can be used, but that can be gotten around by using a certificate named with the IP address of the server, establishing encryption, and then sending the hostname to get that certificate.