6 ms·
> If the website is hosted on a CDN or cloud provider, then someone monitoring the IP traffic only knows that you're visiting something hosted by that CDN. Th
by cortesoft 3y ago
> If the website is hosted on a CDN or cloud provider, then someone monitoring the IP traffic only knows that you're visiting something hosted by that CDN.
This isn't true, because the request leaks the hostname in the handshake via SNI:
https://en.wikipedia.org/wiki/Server_Name_Indication https://en.wikipedia.org/wiki/Server_Name_Indication
- pigeonhole123 3y agoEncrypted SNI has been in the works for a long time: https://www.cloudflare.com/en-gb/learning/ssl/what-is-encrypted-sni/ https://www.cloudflare.com/en-gb/learning/ssl/what-is-encryp...
- cortesoft 3y agoRight, but it isn't standard yet still.