3 ms·

The danger is not that unencrypted SNI exposes clients to additional MitM attacks. It just exposes the client's intended domain to everyone on the connection ro

The danger is not that unencrypted SNI exposes clients to additional MitM attacks. It just exposes the client's intended domain to everyone on the connection route. It's an information leak, that's all.

rocqua 8y ago
I think OP I replied to stated that encrypting SNI requires MitM mitigations.
- hacknat 8y ago
  Everyone on the connection route would be “in the middle”. The actors to watch out for are ISPs and CDNs.