2 ms·
They would know the IP address and host name from SNI, but they wouldn't know which articles on the blog I read.
by cortesoft 4y ago
They would know the IP address and host name from SNI, but they wouldn't know which articles on the blog I read.
- deleted 4y ago[deleted]
- josephcsible 4y agoAnd if you're using TLS ECH, then they wouldn't even know the host name.
- 1vuio0pswjnm7 4y agoThe website operator has to use it, too. Many HTTP servers still do not support TLS1.3 let alone ECH (Draft 13). ECH is still experimental. Cloudflare disabled their ESNI trial a while back (ESNI worked great for me outside the browser), so unless they have now got ECH working (I still have not seen any announcement), currently there are even fewer sites offering encrypted SNI. You could probably count them on one hand. And Firefox (nightly), Chromium (105+) and Brave (nightly) are probably the only browsers that would support ECH and it is not enabled by default. I would be pleased to learn I am wrong here, because I would love to again start using sites that do not return requested pages unless a servername is sent.