3 ms·
SNI doesn't encrypt the desired hostname in the payload of the initial connection. It's still plainly visible to an eavesdropper. They can also observe un-encry
by mumblemumble 6y ago
SNI doesn't encrypt the desired hostname in the payload of the initial connection. It's still plainly visible to an eavesdropper. They can also observe un-encrypted DNS lookups.
- skissane 6y agoeSNI is going to fix that https://tools.ietf.org/html/draft-ietf-tls-esni-07 https://tools.ietf.org/html/draft-ietf-tls-esni-07