> ...but not to which site thanks to TLS. Are you sure? > The desired hostname is not encrypted, so an eavesdropper can see which site is being requested. [0]

> ...but not to which site thanks to TLS. Are you sure? > The desired hostname is not encrypted, so an eavesdropper can see which site is being requested. [0] ESNI is meant to fix this but isn't, yet, widely deployed (AFAIK). --- [0]: https://en.wikipedia.org/wiki/Server_Name_Indication https://en.wikipedia.org/wiki/Server_Name_Indication