News for hackers. Stuff that matters.

A comment on You can’t buy Congress’s web history – that's not how any of this works. Parent comment

Re:You can’t buy Congress’s web history – that's not how any... by hexadec0079 on Thursday March 30, 2017 @08:33AM (#13994784)
HTTPS will not protect the URL of the request, just the contents though.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by temprature on Thursday March 30, 2017 @09:54AM (#13995334)
This is wrong. The domain name is revealed through SNI but the path of the URL is sent as part of the encrypted HTTP request.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by UncleMeat on Thursday March 30, 2017 @05:10PM (#13998885)
HTTPS protects URL parameters. That stuff doesn't go to the DNS request.
[ Parent | on HN ]