https adds nothing to a page when the only trafic is server -> client

seemslegit · on April 18, 2020

Of course it does, HTTP is never only server -> client - from preventing a passive eavesdropper from seeing what pages are being browsed on the server, cookies, UA fingerprinting etc. to active content modification in transit.

progre · on April 18, 2020

Pages are still visable in the tls handshake, no coockies on this page (that would be client-> server traffic). But yeah, good point about the fingerprinting and content modification

seemslegit · on April 18, 2020

No, they aren't - just the hostname (domain name).