5 ms·
> SNI is not part of the request ... SNI is part of the response from the server back to the client. SNI is sent by the client, in the request, at the TLS laye
by WatchDog 4y ago
> SNI is not part of the request ... SNI is part of the response from the server back to the client.
SNI is sent by the client, in the request, at the TLS layer.
It's purpose is to let the server know which certificate it should use to respond to the request.
- Matthias247 4y agoNot in the request but as part of connection establishment (ClientHello). At that point in time the protocol (eg http/1 or /2 or something completely different) isn’t even determined - and so no [http] request exists yet.