3 ms·
> to hide the name (identifier) Internet pages or site on the Internet I may be a bit rusty, but if it is forbidden to hide the URL of a web site, it does not f
by JPLeRouzic 6y ago
> to hide the name (identifier) Internet pages or site on the Internet I may be a bit rusty, but if it is forbidden to hide the URL of a web site, it does not forbid HTTPS.
(edit: I am wrong, thanks for the comments)
- jolmg 6y agoI didn't downvote, but > in HTTPS the URL is in clear. You can see the domain from a previous DNS query, but the URL requested is encrypted. Everything HTTP is encapsulated in TLS.
- ivan_gammel 6y ago...and the explaining letter attached to the draft explicitly mentions both TLS 1.3 and DNS over HTTPS.
- deleted 6y ago[deleted]
- Xylakant 6y agoYou don’t need the DNS query to get the host name/domain: The hostname is sent in clear before the TLS connection is established, otherwise name based virtual hosting would break with TLS. The host would not know which certificate to present. The feature is called SNI - Server Name Indication. AFAIK encrypted SNI is being worked on, but I haven’t followed the latest developments.