3 ms·

Not if your traffic is HTTPS+TLS. They will only know--if they are the target DNS server--what IP you are connecting to. The secure channel protects against the

Not if your traffic is HTTPS+TLS. They will only know--if they are the target DNS server--what IP you are connecting to. The secure channel protects against them knowing more than that.

ianlevesque 7y ago
SNI leaks the domain name you are requesting. It's pretty shocking.
- cesarb 7y ago
  There is already work on encrypted SNI. Last time I looked, it uses information from DNS, so encrypted DNS is a prerequisite.
- snek 7y ago
  Firefox also supports ESNI! These crazy villians shakes fist at Mozilla