4 ms·
I was hoping to read an explanation of how encrypted SNI works. How can the server know which key to use without knowing which domain is being asked for?
by billpg 8y ago
I was hoping to read an explanation of how encrypted SNI works. How can the server know which key to use without knowing which domain is being asked for?
- jgowdy 8y agoTLS 1.3 doesn’t currently have encrypted SNI. It’s a work in progress.
- billpg 8y agoNo wonder I couldn't find it.
- MrRadar 8y agoThe current encrypted SNI proposal[1] basically boils down to putting an ECDH key share in DNS and then using that to encrypt the SNI. [1]: https://tools.ietf.org/html/draft-rescorla-tls-esni-00 https://tools.ietf.org/html/draft-rescorla-tls-esni-00