4 ms·
Can't we just fix TLS to not have this plaintext negotiation component? It clearly isn't necessary, or domain "fronting" couldn't even work.
by CamTin 8y ago
Can't we just fix TLS to not have this plaintext negotiation component? It clearly isn't necessary, or domain "fronting" couldn't even work.
- manquer 8y agoIt is still nessecary , it only works because both domains are serviced by the same CDN servers which ignores the plain text version once the packet reaches them. If the plain text component is not there none of the intermediary parties will know where to route the packet as they cannot decrypt the header.
- dannyw 8y agoWell, routing of the traffic can happen AFTER decryption.