Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It only protects the specific page they're reading. The domain goes in cleartext (that's the whole point of SNI). Kind of a weak protection.


It's really a wash since if you don't have SNI, the IP address uniquely identifies the site that the user is going to and the IP address is on every packet but is not ever encrypted.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: