5 ms·
Firefox does offer an HTTPS only-mode, which tries to upgrade HTTP to HTTPS and warns you before connecting if it's not enabled. Settings > Privacy & Security
by mehlmao 4y ago
Firefox does offer an HTTPS only-mode, which tries to upgrade HTTP to HTTPS and warns you before connecting if it's not enabled.
Settings > Privacy & Security > HTTPS-Only Mode
As far as I know, there are still no practical attacks against TLS 1.2.
- kotlin2 4y agoThe issue I’d like to solve is that, even with TLS, you still leak the SNI as part of the handshake. So your ISP can tell you’re connecting to google.com even if you’re using HTTPS.
- emptyparadise 4y agoWouldn't the ISP still know that you're connecting to Google, however?
- kotlin2 4y agoYour ISP would know the IP address, but not specifically that you were connecting to google.com.
- grangerg 4y agoEven without rDNS, they're almost certain to know of at least one DNS name that goes with the IP address you're connecting to. Even if not, they can label/categorize/group it by ISP and/or approximate location.