3 ms·
If the decoy hostnames (as the author describes it) used in encrypted SNI are deterministic such that you can statically determine the real hostname the client
by dcow 5y ago
If the decoy hostnames (as the author describes it) used in encrypted SNI are deterministic such that you can statically determine the real hostname the client wants, then what’s the point of encrypted SNI in the first place?
- agwa 5y agoECH can't hide which backend the client wants, but if a particular backend handles multiple hostnames, it can hide which of those hostnames the client wants. I went into further detail here: https://news.ycombinator.com/item?id=31136335 https://news.ycombinator.com/item?id=31136335