Hacker News new | past | comments | ask | show | jobs | submit login

> What HTTPs does not encrypt is the domain and ip. The domain is leaked through DNS.

Currently also with SNI.

https://en.wikipedia.org/wiki/Server_Name_Indication

This is important for some censorship circumvention schemes and also because some people have suggested that encrypting SNI is useless because DNS leaks the hostname [however, not necessarily along the same network path!!], while some people have also suggested that encrypting DNS queries is useless because SNI leaks the hostname.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: