Quite. I didn't mean to imply a host/ip header wouldn't leak today - but I see how my comment can be read that way. In fact, siblings point about cf (cloud fla

Quite. I didn't mean to imply a host/ip header wouldn't leak today - but I see how my comment can be read that way. In fact, siblings point about cf (cloud flare) is relevant - as cf eats the world, SNI will potentially be more of a problem; if you connect to site A via IP a, and B via ip b - not much is revealed if host headers A and B leaks, given that traffic to a and b is already obvious. But when you connect to cf on a "nearby" IP c, it suddenly becomes more of a problem that host headers for A, B, D and E are leaking. Not necessarily worse than when your ISP could see you talking to IP a and b - but worse in the sense that you reveal some information to your ISP that would otherwise only be known to cf.