4 ms·
Correct me if I am wrong, but you can still see the URL you navigate to when using https, is that not correct? Once the connection is established you can't see
by gxs 8y ago
Correct me if I am wrong, but you can still see the URL you navigate to when using https, is that not correct?
Once the connection is established you can't see the traffic between you and the URL.
Is my understanding correct?
- tecleandor 8y agoThrough SNI you get to see the domain name [0] (until encrypted SNI is working[1]), but not the rest of the url. [0] - https://security.stackexchange.com/questions/86723/why-do-https-requests-include-the-host-name-in-clear-text https://security.stackexchange.com/questions/86723/why-do-ht... [1] - https://news.ycombinator.com/item?id=17538390 https://news.ycombinator.com/item?id=17538390
- tomschlick 8y agoDue to SNI, the domain name is sent in cleartext but nothing else. So yes they could key off of "fast.com" but other sites where "/speedtest" is included would be encrypted.
- deleted 8y ago[deleted]