3 ms·
If it's equally possible to sniff out the domain name, what makes you predict that more operators would go through the trouble under SNI than did before? The s
by mseebach 13y ago
If it's equally possible to sniff out the domain name, what makes you predict that more operators would go through the trouble under SNI than did before?
The sites in question will likely be blocked soon enough, but it won't be because of SNI being less secure, it will be because more and more traffic will default to TLS - a development helped along by SNI, certainly - and the operators will notice and the gateway providers will add the required sniffing, covering both "old school" certts and SNI.
- Scramblejams 13y agoYeah, I think you're right. Then we'll have a proposal for SNI2 and a multitude of people wishing it had been done right the first time.