News for hackers. Stuff that matters.

A comment on How to leak to the press. Parent comment

Re:How to leak to the press by jnbiche on Friday January 27, 2017 @01:19PM (#13501476)
> Does that reveal that they're visiting the securedrop page, or not?

Potentially, if they're using TLS/SSL with SNI.

[ Parent | on HN ]
Re:How to leak to the press by fennecfoxen on Friday January 27, 2017 @01:31PM (#13501534)
Just as true if they're using the real domain with a dedicated IP, right?
[ Parent | on HN ]
Re:How to leak to the press by jnbiche on Saturday January 28, 2017 @10:23AM (#13506658)
Nope, if they're not using SNI, you'd just see the IP address. Fire up Wireshark some time when you're browsing and watch what comes through.
[ Parent | on HN ]
Re:How to leak to the press by fennecfoxen on Saturday January 28, 2017 @09:06PM (#13511342)
> Nope, if they're not using SNI, you'd just see the IP address.

but that's my point... if you're not using SNI, there's only one SSL server on that IP address, and if reverse-DNS fails you, you can connect on port 443 and ask it for its certificate and it will give it to you...

[ Parent | on HN ]