3 ms·
>Because no sensitive content is being transferred. Define "sensitive". If there is a network attack[0] then the metadata of who is viewing which pages on you
by M2Ys4U 12y ago
>Because no sensitive content is being transferred.
Define "sensitive".
If there is a network attack[0] then the metadata of who is viewing which pages on your blog is revealed. With TLS, only the client/server address pair is leaked.
[0] http://tools.ietf.org/html/rfc7258 http://tools.ietf.org/html/rfc7258
- X-Istence 12y agoAnd the hostname of the server you are connecting to... if SNI is used because we don't have enough IPv4 addresses to host every single site on a unique IP. IPv6 will bring back enough IP's to allow each site to be it's own IP, and no longer require SNI...
- timmclean 12y agoAnd then, of course, we'll effectively be back to leaking hostnames, since there will be a 1:1 mapping between IPs and hostnames...