3 ms·
But the SNI hostname will only include everything left of the TLD. So that is the TLD, the domain name, and the subdomain. It excludes the rest of the URL. If
by acchow 3y ago
But the SNI hostname will only include everything left of the TLD. So that is the TLD, the domain name, and the subdomain. It excludes the rest of the URL.
If you have installed a root cert to allow the government to MITM, then there isn't really anything you can do...
- slt2021 3y agoSNI is enough to classify traffic for enforcement purposes. dont forget that if certain SNI is detected, your ISP/government may try to force downgrade TLS or replace server-hello with their own cert - meaning you will need to install government certificate to browse certain websites and 99% of users will do that to get access