3 ms·

I don't want to make my visitors more trackable than absolutely necessary. Sure, my ISP and their ISP will know that they connected to me, but not to which site

I don't want to make my visitors more trackable than absolutely necessary. Sure, my ISP and their ISP will know that they connected to me, but not to which site thanks to TLS. If I host on CloudFront, Amazon knows exactly which pages they viewed at which time because they can see inside the TLS connection.

jlgaddis 6y ago
> ...but not to which site thanks to TLS. Are you sure? > The desired hostname is not encrypted, so an eavesdropper can see which site is being requested. [0] ESNI is meant to fix this but isn't, yet, widely deployed (AFAIK). --- [0]: https://en.wikipedia.org/wiki/Server_Name_Indication https://en.wikipedia.org/wiki/Server_Name_Indication