3 ms·
> With HTTPS/SSL, security tools can get atleast a look at the unencrypted certificates and perform checks Isn't this mitigated in newer TLS versions?
by remram 3y ago
> With HTTPS/SSL, security tools can get atleast a look at the unencrypted certificates and perform checks
Isn't this mitigated in newer TLS versions?
- Avamander 3y agoIt's not mitigated by TLS itself. It's a separate addition. Chrome has already started their gradual rollout of ECH (previously known as ESNI). Though I haven't seen nice server-side implementations/automation.
- remram 3y agoEncrypted client hello, but not server hello, then. I suppose that makes sense. Thanks!