3 ms·
Between SNI and OCSP, TLS has never been about hiding which websites you visit from prying eyes.
by marginalia_nu 1y ago
Between SNI and OCSP, TLS has never been about hiding which websites you visit from prying eyes.
- DaSHacka 1y agoOCSP is being phased out and ESNI exists though
- marginalia_nu 1y agoESNI/ECH nominally exists, but it's not really seeing very widespread deployment. Last I checked Caddy was the only web server/reverse proxy that fully supports it. The rate of adoption is glacial. My point is that there really hasn't been a point where domain level traffic information has been truly anonymous. Whether this is an oversight or state actors have made the outcome a reality, I have no idea. Probably a bit of both.