News for hackers. Stuff that matters.

A comment on How to keep your ISP’s nose out of your browser history with encrypted DNS. Parent comment

Re:How to keep your ISP’s nose out of your browser history w... by ori_b on Monday April 09, 2018 @01:19AM (#16790603)
> Couldn't the client send SNI after the DH and then the server authenticate the secret?

That means you can't use sni to route your request to a different server.

[ Parent | on HN ]
Re:How to keep your ISP’s nose out of your browser history w... by infogulch on Monday April 09, 2018 @02:30AM (#16790862)
Yes, whatever is serving on that interface will have to terminate TLS. Or somehow pass the session information to the proxied server, or ask the client to reconnect, or do some kind of tls tunneling from the client to the real host. I don't think any of those are unreasonable options.
[ Parent | on HN ]