3 ms·
It is sad to see the SNI encryption isn't in TLS 1.3. I'd say that unencrypted SNI is the single biggest issue with TLS 1.2; it is a very obvious leak of inform
by rocqua 8y ago
It is sad to see the SNI encryption isn't in TLS 1.3. I'd say that unencrypted SNI is the single biggest issue with TLS 1.2; it is a very obvious leak of information. All of the improvements in TLS 1.3 are nice-to-haves, but they are mostly shoring up systems that are already pretty secure, whilst we leave the largest leak open.
- tialaramex 8y agoIn prior TLS versions the server certificate is sent unencrypted. So a passive eavesdropper gets not just the name but a certificate for that name from the server. This is fixed in TLS 1.3