5 ms·
Isn't domain information still in the clear? (What specific domain you're connecting to.)
by logicallee 7y ago
Isn't domain information still in the clear? (What specific domain you're connecting to.)
- tialaramex 7y agoThe exact hostname is delivered in SNI (serverNameIndication) during connection yes. Figuring out a safe reliable way to encrypt this data is an ongoing work item for the TLS Working Group after TLS 1.3 wrapped up. If you have a recent Firefox (possibly only in Nightlies?) you can see one possible approach work with Cloudflare sites which opted in. You will also need encrypted DNS (DPRIVE e.g. DNS over HTTPS) or it's largely pointless.