It's sent un-encrypted in the very first handshake setup so the server knows which public key to return. Details here[0]. There is, as you can see from Wikiped

It's sent un-encrypted in the very first handshake setup so the server knows which public key to return. Details here[0]. There is, as you can see from Wikipedia[0], an encrypted version(esni), but that only sort of solves the problem. See [1] for more details on those. The high level overview is, perfect secrecy of who you are talking to is a very hard problem on the Internet, and while some of these new features might help, there are a LOT of leaks to plug, so if someone is able to watch your traffic go by, chances are they can tell who you are talking to, but they maybe can't figure out what you are saying. Which may or may not matter, depending on your security threat(s). 0: https://en.wikipedia.org/wiki/Server_Name_Indication https://en.wikipedia.org/wiki/Server_Name_Indication 1: https://tools.ietf.org/html/draft-ietf-tls-esni-05#section-7 https://tools.ietf.org/html/draft-ietf-tls-esni-05#section-7