News for hackers. Stuff that matters.

A comment on NordVPN library and client code open-sourced. Parent comment

Re:NordVPN library and client code open-sourced by lxgr on Tuesday March 14, 2023 @05:05PM (#35158610)
Full URLs: Definitely not. Path and query parameters are part of the HTTP payload, i.e. encrypted within HTTPS.

Host names: Very likely, unless you're using SNI.

[ Parent | on HN ]
Re:NordVPN library and client code open-sourced by None4U on Tuesday March 14, 2023 @08:04PM (#35161534)
You mean eSNI, SNI is the field containing the hostname and eSNI stands for "encrypted SNI"
[ Parent | on HN ]
Re:NordVPN library and client code open-sourced by lxgr on Tuesday March 14, 2023 @09:44PM (#35162584)
Right, thanks!

I keep thinking the "e" is for "enhanced" encryption, i.e. "eSNI 2.0", but what I'm thinking of is actually called ECH (for "encrypted client hello"): https://blog.cloudflare.com/encrypted-client-hello/

[ Parent | on HN ]