4 ms·
That's correct. The conversation, as seen by an eavesdropper will be: - Client makes DNS request to example.com. - DNS server (we hope the legitimate one)
by billpg 12y ago
That's correct. The conversation, as seen by an eavesdropper will be:
- Client makes DNS request to example.com.
- DNS server (we hope the legitimate one) sends IP addr in response.
- Client connects to server IP.
- TLS negotiation including certs.
- Bunch of bytes that look like noise.
- Disconnect.
- Tepix 12y agoIn the case of SNI ( https://en.wikipedia.org/wiki/Server_Name_Indication https://en.wikipedia.org/wiki/Server_Name_Indication ) the attacker will see which virtual host you contacted (it's probably the same as the one seen in the DNS lookup).