3 ms·
Isn't the host that a user is requesting passed unencrypted anyways via SNI?
by cpitman 10y ago
Isn't the host that a user is requesting passed unencrypted anyways via SNI?
- Chlorus 10y agoAlso plain as day in the DNS lookup - but a MITM-attacker knowing the host you're connecting to isn't the problem here; it's that the attacker knows which particular URLs you have requested.