4 ms·
SNI is sent even if the server ignores it.
by hsivonen 10y ago
SNI is sent even if the server ignores it.
- EvilTerran 10y agoAnd even if your client software doesn't use SNI... the server has to send you the cert before an authenticated encrypted channel can be established, so the cert's snoopable - and has the domain name in it.