4 ms·
We have SNI. Now sure your therapist may run their own VM on it's own IP address, but that's not very likely.
by iso1210 6y ago
We have SNI. Now sure your therapist may run their own VM on it's own IP address, but that's not very likely.
- mumblemumble 6y agoSNI doesn't encrypt the desired hostname in the payload of the initial connection. It's still plainly visible to an eavesdropper. They can also observe un-encrypted DNS lookups.
- skissane 6y agoeSNI is going to fix that https://tools.ietf.org/html/draft-ietf-tls-esni-07 https://tools.ietf.org/html/draft-ietf-tls-esni-07