4 ms·
> Even if I used HTTPS, someone spying on my traffic would > know what I'm reading, if the IP address is a dedicated > server for that web site only H
by peteretep 12y ago
> Even if I used HTTPS, someone spying on my traffic would
> know what I'm reading, if the IP address is a dedicated
> server for that web site only
How would they know the IP is a dedicated server for that website only, rather than simply a default?
- icebraining 12y agoSince the SSL negotiation happens before the HTTP request, either there's only one certificate for that IP or you need to use SNI, which reveals the domain you're requesting. You could have multiple domains in the certificate to avoid identification, but that has its own problems.