4 ms·
SNI isn't encrypted. They can see plaintext domain name of your https requests. Obviously, they can also see the IP you're connecting to. Maybe ECH will be r
by brobinson 3y ago
SNI isn't encrypted. They can see plaintext domain name of your https requests. Obviously, they can also see the IP you're connecting to. Maybe ECH will be rolled out at some point, and we can stop using SNI.
- mixmastamyk 3y agoThey knew the filename. May be a vulnerability in an external client app, not sure. Says it encrypts connections but must be leaking somehow.
- brobinson 3y agoAre you using torrents or something else? If you downloaded a file over HTTPS, all they can see is the IP, domain name, and the amount of data transferred on a given connection.