4 ms·
Very limited with TLS. With webhosts, the PTR record means little. CDNs also obfuscate your destination. Shared hosting sites only care about the host field in
by badrabbit 7y ago
Very limited with TLS. With webhosts, the PTR record means little. CDNs also obfuscate your destination. Shared hosting sites only care about the host field in the encrypted HTTP as well. Especially given the oversaturation of IPv4.
Keep in mind, it's not just what you visit but how often as well and a lot other details (dns is cached)
- gioele 7y ago> Very limited with TLS. With webhosts, the PTR record means little. TLS+SNI sends the `Host` you are connecting to in plain text. eSNI is not yet widely deployed. Centralizing DNS without centralizing HTTP (e.g. domain fronting) does not solve the leak of connection metadata.