3 ms·
SNI doesn't make the TLS handshake process and more or less secure. The ServerHello and Certificate messages sent by the TLS server are still sent unencrypted.
by yrro 6y ago
SNI doesn't make the TLS handshake process and more or less secure. The ServerHello and Certificate messages sent by the TLS server are still sent unencrypted.
- 1vuio0pswjnm7 6y ago"The ServerHello and Certificate messages sent by the TLS server are still sent unencrypted." RFC 8446, page 7: "All handshake messages after the ServerHello are now encrypted. The newly introduced EncryptedExtensions message allows various extensions previously sent in the clear in the ServerHello to also enjoy confidentiality protection."