News for hackers. Stuff that matters.
Re:Brute-forcing a macOS user’s real name from a browser usi... by ZiiS on Friday July 14, 2023 @07:31AM (#36722369)
Unencrypted SNI is fairly rare now.
Re:Brute-forcing a macOS user’s real name from a browser usi... by brazzledazzle on Friday July 14, 2023 @12:25PM (#36726189)
Yeah. I noticed even server-side software is using it less too. Kind of annoying if you use SNI inspection as part of your egress security.
Re:Brute-forcing a macOS user’s real name from a browser usi... by inferiorhuman on Friday July 14, 2023 @07:06PM (#36731147)
Is it? The best I could find was a bit from 2021 that showed 92 of the Alexa Top 1000 site supporting ESNI. If adoption has skyrocketed since then that's great… meanwhile Firefox is showing HN negotiated a TLS 1.2 connection with no ESNI support.