3 ms·
SNI requires the host header to be sent unencrypted, as the server needs to know which certificate to offer for the TLS session.
by tremon 7y ago
SNI requires the host header to be sent unencrypted, as the server needs to know which certificate to offer for the TLS session.
- wrboyce 7y agoNo. The SNI is transmitted in plain text as part of the ClientHello but TLS does not care about application implementation details. The HTTP Host header is encrypted along with the rest of the request.