News for hackers. Stuff that matters.

A comment on Tailscale Has Partnered with Mullvad. Parent comment

Re:Tailscale Has Partnered with Mullvad by brobinson on Thursday September 07, 2023 @04:24PM (#37425049)
SNI isn't encrypted. They can see plaintext domain name of your https requests. Obviously, they can also see the IP you're connecting to. Maybe ECH will be rolled out at some point, and we can stop using SNI.
[ Parent | on HN ]
Re:Tailscale Has Partnered with Mullvad by mixmastamyk on Thursday September 07, 2023 @07:22PM (#37427041)
They knew the filename. May be a vulnerability in an external client app, not sure. Says it encrypts connections but must be leaking somehow.
[ Parent | on HN ]
Re:Tailscale Has Partnered with Mullvad by brobinson on Thursday September 07, 2023 @07:54PM (#37427350)
Are you using torrents or something else?

If you downloaded a file over HTTPS, all they can see is the IP, domain name, and the amount of data transferred on a given connection.

[ Parent | on HN ]