News for hackers. Stuff that matters.
Re:TLS 1.3 approved by cesarb on Saturday March 24, 2018 @12:10PM (#16667315)
Wouldn't that be a bit of a privacy leak? If 0rrt works, it was a request for a static asset.

Of course, TLS is not only for privacy reasons, but also for integrity reasons (preventing injection of malicious Javascript and similar attacks). For that purpose, 0rtt for static assets works fine.

Re:TLS 1.3 approved by minitech on Saturday March 24, 2018 @02:11PM (#16667940)
> Wouldn't that be a bit of a privacy leak? If 0rrt works, it was a request for a static asset.

Response size and timing probably already leak this.

Re:TLS 1.3 approved by nfoz on Saturday March 24, 2018 @10:32PM (#16670331)
This honestly really bothers me.

We're encrypting everything, we have "Let's Encrypt", we have browsers telling users that their connections are "secure".

Meanwhile your DNS lookups are public (which leaks what site you're accessing) and size+timing analysis leaks which static assets you've retrieved. Which gives away for example what article you're reading on what news site. Which the site itself is telling google, facebook and other malicious third-parties anyway...

How is anyone supposed to understand digital privacy? Everything sucks, and I'm not even sure what could be done to make it suck less.

Re:TLS 1.3 approved by adrianN on Sunday March 25, 2018 @02:24AM (#16671043)
I think for the average user, the authentication part is a lot more important than the encryption part unless they're entering passwords. I want to be relatively sure that the site I'm visiting hasn't been replaced by something serving malware. I don't care as much about people knowing which articles I read.
Re:TLS 1.3 approved by zaarn on Monday March 26, 2018 @05:20AM (#16677650)
For DNS lookups we're having people testing out DNS-over-HTTPS which would solve this entirely, lookups would be opaque to anyone but the DNS server involved.

For timing and size you can usually do something about it as a site owner (HTTP/2 for example will multiplex connections so it makes timing and size comparisons much harder)

Re:TLS 1.3 approved by thisacctforreal on Sunday March 25, 2018 @01:50AM (#16670961)
Even without encrypted DNS lookups, HTTPS leaks the FQDN (i.e. exact subdomain) of what you are connecting to through Server Name Indication.

SNI was added to allow servers to know which SSL certificate to send to the browser, previously you would need to have one IP address per SSL certificate.