4 ms·
During the TLS handshake, you send the domain name in clear text (Server Name Indication - SNI extension) so that the hoster can present the correct certificate
by aand16 3mo ago
During the TLS handshake, you send the domain name in clear text (Server Name Indication - SNI extension) so that the hoster can present the correct certificate for that domain.
Nothing prevents the ISP from collecting that.
- ekr____ 3mo agoHence Encrypted Client Hello (https://datatracker.ietf.org/doc/rfc9849/ https://datatracker.ietf.org/doc/rfc9849/), though deployment is still thin.