Re:Tor and HTTPS
by knome on Sunday June 09, 2013 @12:20PM
(#5849428)
This is no longer true.
Seeing as HTTPS sites could not previously share an IP address, making it obvious which site communications with any given IP address was directed towards, an extension was developed that now sends the desired host unencrypted before the encrypted package.
This doesn't yield any more information that could previously be derived, but does allow you to serve as many HTTPS sites from a single host as you wish.
Seeing as HTTPS sites could not previously share an IP address, making it obvious which site communications with any given IP address was directed towards, an extension was developed that now sends the desired host unencrypted before the encrypted package.
This doesn't yield any more information that could previously be derived, but does allow you to serve as many HTTPS sites from a single host as you wish.
http://en.wikipedia.org/wiki/Server_Name_Indication