ISPs can sniff the hostname from the HTTPS Server Name Indicator (SNI) headers b... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

zimbatm on July 7, 2019 | parent | context | favorite | on: How to Enable DNS-over-HTTPS in Firefox

ISPs can sniff the hostname from the HTTPS Server Name Indicator (SNI) headers because they are transmitted in clear.

The next step will be to deploy the TLS 1.3 Encrypted Server Name Indicator (ESNI)[1].

[1]: https://tools.ietf.org/html/draft-ietf-tls-esni-03

Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact