10 ms·
They can see that anyway if they intercept the traffic anyway, since the IP will be in all packets. Even better, the TCP connection will end up creating routing
by lucian1900 13y ago
They can see that anyway if they intercept the traffic anyway, since the IP will be in all packets. Even better, the TCP connection will end up creating routing tables on all hops along the way.
- masomenos 13y agoUnless there are multiple secured domains hosted on that IP address, in which case knowing the domain would be extra information.
- richardwhiuk 13y agoYou can't have multiple secure domains on a single host which don't require the user to know a non-standard port without exposing the domain in plain text as part of SNI.
- RKearney 13y agoYou can if you have a certificate with multiple domain names in the SAN[0] field. [0] http://en.wikipedia.org/wiki/SubjectAltName http://en.wikipedia.org/wiki/SubjectAltName
- mrud 13y agoI don't get the comment how TCP creates routing tables but just having an IP address for HTTPS is not necessarily sufficient as you can have virtual hosts.