How to keep your ISP’s nose out of your browser history with encrypted DNS

Re:How to keep your ISP’s nose out of your browser history w... by _wmd on Monday April 09, 2018 @09:46AM (#16792898)

Since the ClientHello is sent in the clear, a MITM can simply reset the connection until the client retries with SNI. Again, there is no generally useful way to solve this

[ Parent | on HN ]

Re:How to keep your ISP’s nose out of your browser history w... by aplorbust on Monday April 09, 2018 @05:00PM (#16796952)

"... a MITM can simply reset the connection until the client retries with SNI."

That doesnt happen when I fetch https://example.com without sending a servername in ClientHello.

For the majority of TLS-enabled websites on the internet, that does not happen. I get the page content just fine witout sending a servername in ClientHello.

But I should send the servername in ClientHello anyway?

This reasoning I am too stupid to understand.

[ Parent | on HN ]