3 ms·
> What HTTPs does not encrypt is the domain and ip. The domain is leaked through DNS. Currently also with SNI. https://en.wikipedia.org/wiki/Server_Name_Indic
by schoen 9y ago
> What HTTPs does not encrypt is the domain and ip. The domain is leaked through DNS.
Currently also with SNI.
https://en.wikipedia.org/wiki/Server_Name_Indication https://en.wikipedia.org/wiki/Server_Name_Indication
This is important for some censorship circumvention schemes and also because some people have suggested that encrypting SNI is useless because DNS leaks the hostname [however, not necessarily along the same network path!!], while some people have also suggested that encrypting DNS queries is useless because SNI leaks the hostname.