Re:“This is why I use ad blockers and a pi-hole server”
by tremon on Thursday January 23, 2020 @01:38PM
(#22130319)
SNI requires the host header to be sent unencrypted, as the server needs to know which certificate to offer for the TLS session.
[ Parent
| on HN ]
Re:“This is why I use ad blockers and a pi-hole server”
by wrboyce on Thursday January 23, 2020 @02:47PM
(#22131091)
No. The SNI is transmitted in plain text as part of the ClientHello but TLS does not care about application implementation details. The HTTP Host header is encrypted along with the rest of the request.