Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If it's equally possible to sniff out the domain name, what makes you predict that more operators would go through the trouble under SNI than did before?

The sites in question will likely be blocked soon enough, but it won't be because of SNI being less secure, it will be because more and more traffic will default to TLS - a development helped along by SNI, certainly - and the operators will notice and the gateway providers will add the required sniffing, covering both "old school" certts and SNI.



Yeah, I think you're right. Then we'll have a proposal for SNI2 and a multitude of people wishing it had been done right the first time.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: