News for hackers. Stuff that matters.

A comment on TLS 1.3 and Proxies. Parent comment

Re:TLS 1.3 and Proxies by dspillett on Sunday March 11, 2018 @08:20PM (#16565450)
> SNI is there to make "virtual hosting" possible for HTTPS, which is why you can get working SSL on a cheap bulk host without paying them extra for a dedicated IP address]

At least for those that are stuck on IPv4, which is unfortunately a majority.

[ Parent | on HN ]
Re:TLS 1.3 and Proxies by clinta on Sunday March 11, 2018 @10:27PM (#16565853)
IPv6 without SNI won't really fix the censorship issue anyway. If you're not using a shared host with SNI The proxy can just query the host at the IP address you're attempting to access and see what it responds with, since that IP will only be serving one domain.
[ Parent | on HN ]