2 ms·
ESNI is still in draft.
by gsich 7y ago
ESNI is still in draft.
- e12e 7y agoQuite. I didn't mean to imply a host/ip header wouldn't leak today - but I see how my comment can be read that way. In fact, siblings point about cf (cloud flare) is relevant - as cf eats the world, SNI will potentially be more of a problem; if you connect to site A via IP a, and B via ip b - not much is revealed if host headers A and B leaks, given that traffic to a and b is already obvious. But when you connect to cf on a "nearby" IP c, it suddenly becomes more of a problem that host headers for A, B, D and E are leaking. Not necessarily worse than when your ISP could see you talking to IP a and b - but worse in the sense that you reveal some information to your ISP that would otherwise only be known to cf.