4 ms·
don't you think SNI leaks will get fixed eventually?
by jopsen 9y ago
don't you think SNI leaks will get fixed eventually?
- kuschku 9y agoNo. All actors currently involved with the web are ideologically opposed to backwards incompatible changes, and, as a result, they'd never make a change that prevents a browser from accessing a legacy site. As result, SNI is here to stay.
- tialaramex 9y agoThis isn't how backwards compatibility works. A hypothetical encrypted SNI would be "optional" in the sense that your Firefox 57 wouldn't use it, but a site could implement it, and Firefox 73 could too and then the actual user of that actual site is protected by upgrading to FF 73. If you were right everything would still be HTML 4 over HTTP 1.1
- kuschku 9y agoThe problem with SNIis that it happens before all that negotiation. This is why today your browser sends the SNI info even if the site will never need it. And that also means for eternity all TLS1.3 or lower connections will continue to use SNI.
- LogicX 9y agoYes. https://www.ietf.org/proceedings/94/slides/slides-94-tls-8.pdf https://www.ietf.org/proceedings/94/slides/slides-94-tls-8.p...