News for hackers. Stuff that matters.

A comment on Choosing a Public DNS Resolver. Parent comment

Re:Choosing a Public DNS Resolver by aand16 on Sunday June 28, 2026 @09:20AM (#48707045)
During the TLS handshake, you send the domain name in clear text (Server Name Indication - SNI extension) so that the hoster can present the correct certificate for that domain.

Nothing prevents the ISP from collecting that.

[ Parent | on HN ]
Re:Choosing a Public DNS Resolver by ekr____ on Sunday June 28, 2026 @02:30PM (#48710068)
Hence Encrypted Client Hello (https://datatracker.ietf.org/doc/rfc9849/), though deployment is still thin.
[ Parent | on HN ]