3 ms·
>Meh, if an attacker can sniff your packets, they can already tell what IP addresses you're talking to, which certainly narrows down which domain names you're t
by ac29 10y ago
>Meh, if an attacker can sniff your packets, they can already tell what IP addresses you're talking to, which certainly narrows down which domain names you're talking to.
Honest question: with an increasing amount of sites being hosted via cloud infrastructure, does an IP really let you know if you are talking to Amazon, Google, or Microsoft vs the multitude of sites hosted by AWS, GCP, or Azure?
I'm assuming they use their own infrastructure, but I could be wrong.
- minitech 10y agoYes, VPS services will still assign your instance an IP address of its own.
- Buge 10y agoIPs don't matter. SNI tells eavesdroppers the exact domain you are talking to.
- Tepix 10y agoHopefully we will get Encrypted SNI with TLS 1.3 https://www.ietf.org/proceedings/94/slides/slides-94-tls-8.pdf https://www.ietf.org/proceedings/94/slides/slides-94-tls-8.p...