Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt...
by evfanknitram on Monday July 16, 2018 @03:54AM
(#17539500)
The Remote IP is almost as sensitive as SNI right?
[ Parent
| on HN ]
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt...
by bosdev on Monday July 16, 2018 @07:33AM
(#17540436)
This proposal is generally for sites which are behind an edge network like Cloudflare. In that case your remote IP is the IP of the provider, not your actual server.
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt...
by hansjorg on Monday July 16, 2018 @05:28AM
(#17539850)
Not always, see domain fronting: https://en.m.wikipedia.org/wiki/Domain_fronting
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt...
by blattimwind on Monday July 16, 2018 @06:48AM
(#17540219)
Or services which use subdomains for individual users, e.g. #.github.io, #.tumblr.com, #.blogspot.tld and so on.
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt...
by cesarb on Monday July 16, 2018 @08:02AM
(#17540597)
This. Currently, the difference between accessing github.com/blattimwind and blattimwind.github.io is that, in the second case, which username you're accessing is visible to all. Encrypted SNI will also protect that part of the URL.
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt...
by tscs37 on Monday July 16, 2018 @03:56AM
(#17539509)
Not necessarily, think CDNs or Shared IPs for Webspaces.