News for hackers. Stuff that matters.
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by evfanknitram on Monday July 16, 2018 @03:54AM (#17539500)
The Remote IP is almost as sensitive as SNI right?
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by bosdev on Monday July 16, 2018 @07:33AM (#17540436)
This proposal is generally for sites which are behind an edge network like Cloudflare. In that case your remote IP is the IP of the provider, not your actual server.
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by hansjorg on Monday July 16, 2018 @05:28AM (#17539850)
Not always, see domain fronting: https://en.m.wikipedia.org/wiki/Domain_fronting
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by blattimwind on Monday July 16, 2018 @06:48AM (#17540219)
Or services which use subdomains for individual users, e.g. #.github.io, #.tumblr.com, #.blogspot.tld and so on.
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by cesarb on Monday July 16, 2018 @08:02AM (#17540597)
This. Currently, the difference between accessing github.com/blattimwind and blattimwind.github.io is that, in the second case, which username you're accessing is visible to all. Encrypted SNI will also protect that part of the URL.
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by tscs37 on Monday July 16, 2018 @03:56AM (#17539509)
Not necessarily, think CDNs or Shared IPs for Webspaces.
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by beokop on Monday July 16, 2018 @04:08AM (#17539559)
So in reality it is just as sensitive.
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by whyever on Monday July 16, 2018 @04:49AM (#17539700)
It can be as sensitive. But in the best case, shared IPs provide more anonymity.