3 ms·
Are you kidding? Snooping like this is EXACTLY why we still have unencrypted ServerNameIndication, even to this day in ECH (which still leaves the outer SNI in
by crotchfire 3y ago
Are you kidding?
Snooping like this is EXACTLY why we still have unencrypted ServerNameIndication, even to this day in ECH (which still leaves the outer SNI in the clear).
- lxgr 3y agoWhat does the outer SNI tell a hypothetical filtering/traffic shaping ISP that the IP address doesn't already?
- deleted 3y ago[deleted]
- londons_explore 3y agolots of sites often just are connections to cloudflare/akami/fastly these days. Ie. one IP, millions of websites. The ISP/feds need SNI to tell what you're up to.
- lxgr 3y agoYes, but the outer SNI (with ECH) in that case would just say "Cloudflare", "Akamai" etc., if I understand it correctly.