News for hackers. Stuff that matters.

A comment on End-to-end encryption in the browser. Parent comment

Re:End-to-end encryption in the browser by marcus_holmes on Monday March 23, 2020 @10:01AM (#22664158)
well, not the whole url, obviously, otherwise the router wouldn't know where to send the request
[ Parent | on HN ]
Re:End-to-end encryption in the browser by dogma1138 on Monday March 23, 2020 @10:35AM (#22664474)
The entire URL is encrypted, the router doesn't need to know anything about the URL to route the packets. The only thing that can leak when you make an HTTPS connection is the DNS query.
[ Parent | on HN ]
Re:End-to-end encryption in the browser by hiq on Monday March 23, 2020 @11:40AM (#22665090)
The SNI leaks without ESNI:

https://en.wikipedia.org/wiki/Server_Name_Indication#Securit...

[ Parent | on HN ]
Re:End-to-end encryption in the browser by smolder on Monday March 23, 2020 @10:54AM (#22664653)
TLS server name indication can also leak your host, sadly.
[ Parent | on HN ]
Re:End-to-end encryption in the browser by DaniloDias on Monday March 23, 2020 @11:46AM (#22665147)
You are confusing layer 4 and later 7 concepts.

Spend some time with wireshark running while you visit “google.com” in a web browser and you’ll get a better intuition on the topic.

[ Parent | on HN ]
Re:End-to-end encryption in the browser by marcus_holmes on Wednesday March 25, 2020 @03:37AM (#22682676)
that makes sense, thanks
[ Parent | on HN ]