I discovered caching CDNs were throttling my everyday browsing

Re:I discovered caching CDNs were throttling my everyday bro... by crotchfire on Thursday November 23, 2023 @09:25AM (#38393080)

Are you kidding?

Snooping like this is EXACTLY why we still have unencrypted ServerNameIndication, even to this day in ECH (which still leaves the outer SNI in the clear).

[ Parent | on HN ]

Re:I discovered caching CDNs were throttling my everyday bro... by lxgr on Thursday November 23, 2023 @09:52AM (#38393341)

What does the outer SNI tell a hypothetical filtering/traffic shaping ISP that the IP address doesn't already?

[ Parent | on HN ]

Re:I discovered caching CDNs were throttling my everyday bro... by londons_explore on Thursday November 23, 2023 @10:24AM (#38393712)

lots of sites often just are connections to cloudflare/akami/fastly these days. Ie. one IP, millions of websites. The ISP/feds need SNI to tell what you're up to.

[ Parent | on HN ]

Re:I discovered caching CDNs were throttling my everyday bro... by lxgr on Thursday November 23, 2023 @10:54AM (#38394111)

Yes, but the outer SNI (with ECH) in that case would just say "Cloudflare", "Akamai" etc., if I understand it correctly.

[ Parent | on HN ]