zlacker

[parent] [thread] 2 comments
1. cortes+(OP)[view] [source] 2023-08-02 16:50:33
> If the website is hosted on a CDN or cloud provider, then someone monitoring the IP traffic only knows that you're visiting something hosted by that CDN.

This isn't true, because the request leaks the hostname in the handshake via SNI:

https://en.wikipedia.org/wiki/Server_Name_Indication

replies(1): >>pigeon+V5
2. pigeon+V5[view] [source] 2023-08-02 17:16:09
>>cortes+(OP)
Encrypted SNI has been in the works for a long time: https://www.cloudflare.com/en-gb/learning/ssl/what-is-encryp...
replies(1): >>cortes+rS7
◧◩
3. cortes+rS7[view] [source] [discussion] 2023-08-04 18:17:19
>>pigeon+V5
Right, but it isn't standard yet still.
[go to top]