4 ms·
This is somewhat the case as SNI is unencrypted.
by gsich 6y ago
This is somewhat the case as SNI is unencrypted.
- m-p-3 6y agoBut there's eSNI.
- thayne 6y agoWhich is a very new technology, and not widely deployed yet.
- zaarn 6y agoI get about 5k unique visitors from my websites, additional 20k visitors from a community project I'm in. We see about 30 - 40% eSNI Adoption.
- thayne 6y agoAnd that is just client support. For eSNI to work, both client and server must support it.
- zaarn 6y agoAdoption, not support, meaning the clients and server both support it. I bet most of the non-supporting clients are simply either a bit outdated or had it disabled (probably by the client local AV engine).
- gsich 6y agoUnlikely. Since OpenSSL has no support for it (by extension this includes Apache and Nginx) because it's not a standard yet, adoption is very low. Also Chromium and by extension Chrome has no support for it. Firefox does support a draft, but since Firefox usage numbers are somewhat low depending on what statistic you believe, this amounts to not much.
- gsich 6y agoA draft. OpenSSL devs wait for it to be finished.
- BrandoElFollito 6y agoCould you expand on that please? SNI is not the full URL or am I missing something?