3 ms·
Yeah, not sure how this would work over HTTPS without proxy or rogue cert. With proxy, you can use HTTP CONNECT proxy : computer provides domain (SNI) and prox
by jve 4y ago
Yeah, not sure how this would work over HTTPS without proxy or rogue cert.
With proxy, you can use HTTP CONNECT proxy : computer provides domain (SNI) and proxy can make allow/deny decision. If allowed, establishes a blind tunnel where packets flow without further inspection.
- Thorrez 4y agoSNI has nothing to do with proxies. Essentially all HTTPS connections provide SNI, regardless of whether there's a proxy or not. A MITM can sniff the SNI. There's a draft standard to encrypt the SNI. I don't think it's been widely adopted.