News for hackers. Stuff that matters.
Re:1.1.1.1: Fast, privacy-first consumer DNS service by dancek on Monday April 02, 2018 @04:04AM (#16733066)
The client that sends SNI is, AFAIK, the browser or a similar piece of software. Some older browsers don't support SNI so they can only access single-vhost-per-ip over https.

This means you'll have a really hard time trying to get rid of SNI system-wide, what with a lot of minor apps making their own https connections (granted, on Android or iOS they probably use a common API, but not on a computer).

There are no comments on this comment yet.