News for hackers. Stuff that matters.

A comment on End-to-end encryption in the browser. Parent comment

Re:End-to-end encryption in the browser by dogma1138 on Monday March 23, 2020 @10:35AM (#22664474)
The entire URL is encrypted, the router doesn't need to know anything about the URL to route the packets. The only thing that can leak when you make an HTTPS connection is the DNS query.
[ Parent | on HN ]
Re:End-to-end encryption in the browser by hiq on Monday March 23, 2020 @11:40AM (#22665090)
The SNI leaks without ESNI:

https://en.wikipedia.org/wiki/Server_Name_Indication#Securit...

[ Parent | on HN ]
Re:End-to-end encryption in the browser by smolder on Monday March 23, 2020 @10:54AM (#22664653)
TLS server name indication can also leak your host, sadly.
[ Parent | on HN ]