News for hackers. Stuff that matters.

A comment on Microsoft bakes a VPN into Edge and turns it on. Parent comment

Re:Microsoft bakes a VPN into Edge and turns it on by erinnh on Friday September 30, 2022 @04:28PM (#33040349)
I thought TLSv1.3 already encrypted the SNI?
[ Parent | on HN ]
Re:Microsoft bakes a VPN into Edge and turns it on by detaro on Saturday October 01, 2022 @09:17AM (#33046375)
No. ESNI is an later-created extension to TLS 1.3
[ Parent | on HN ]
Re:Microsoft bakes a VPN into Edge and turns it on by uup on Saturday October 01, 2022 @06:58AM (#33045618)
It does
[ Parent | on HN ]
Re:Microsoft bakes a VPN into Edge and turns it on by Varloom on Sunday October 02, 2022 @04:09PM (#33059695)
ESNI is not implemented yet on any website. And there is no software support except beta versions of Chrome/Edge and you have to manually toggle flags in dev mode.

All SNIs are passed as plain text to your ISP/VPN, even with DoH/TLS secure DNS enabled.

[ Parent | on HN ]