3 ms·
everything over HTTPS is encrypted except the ip addresses and port #. hostname is also encrypted (cause it's a header), though your insecure DNS pre-queries w
by leeoniya 12y ago
everything over HTTPS is encrypted except the ip addresses and port #.
hostname is also encrypted (cause it's a header), though your insecure DNS pre-queries will give that away to anyone listening on the wire.
- icebraining 12y agoHostname is not encrypted if you're using SNI[1], and if you're not, you can only connect to IPs that serve a single HTTPS site, so it's not meaningfully hidden anyway. [1] http://en.wikipedia.org/wiki/Server_Name_Indication http://en.wikipedia.org/wiki/Server_Name_Indication
- leeoniya 12y agoah yes, forgot about that :)