Let's not forget about SNI

Posted by foobuzzHN on Saturday August 11, 2018 @09:17AM
from the foobuzz.github.io dept.

https://foobuzz.github.io/doh-sni/

( 2 comments | on HN )

Re:Let's not forget about SNI by mhkool on Saturday August 11, 2018 @09:39AM (#17739625)

The only SNI that the ISP can see is the SNI of the DNS provider. The goal was to protect the DNS queries itself from eavesdropping and that is implemented.

[ Parent | on HN ]

Re:Let's not forget about SNI by NewEntryHN on Saturday August 11, 2018 @12:30PM (#17740317)

Once the target IP is resolved and the actual request to the site takes place the ISP can see the SNI of the resolved host.

[ Parent | on HN ]