3 ms·
> My ISP can still see the domain names of sites I visit, via both SNI and OCSP. Encrypted SNI and OCSP stapling solve those problems.
by nwallin 7y ago
> My ISP can still see the domain names of sites I visit, via both SNI and OCSP.
Encrypted SNI and OCSP stapling solve those problems.
- badrabbit 7y agoThey see the SNI but not the host. eSNI would help but so do CDNs (even with ocsp/crl since hundreds of sites use a single cert. Domain fronting is getting more common too