Under the assumption that DNS will move to TLS, a future TLS will have to incur this cost. It is nice to have 1RTT, but if at the same time you are leaking SNI

Under the assumption that DNS will move to TLS, a future TLS will have to incur this cost. It is nice to have 1RTT, but if at the same time you are leaking SNI, people are not going to be happy. I'm curious how this hashing would work out. My gut feeling is that some security researcher will have a nice presentation along the line of 'nice hash function you have, here's how to break it'.