Re:Handbrake 0.10.0 released
by icebraining on Monday November 24, 2014 @04:40AM
(#8651638)
The hostname of your request might leak in SNI, or if your DNS lookup was insecure.
You don't need a DNS leak; if you aren't using SNI, the server(s) replying on that IP can only serve a single cert, so the snooper can usually find out the hostname by simply connecting to it and seeing what it gets.
The exception is if the site is behind something like Cloudflare, which stuff dozens or hundreds of hostnames in a single cert.
You don't need a DNS leak; if you aren't using SNI, the server(s) replying on that IP can only serve a single cert, so the snooper can usually find out the hostname by simply connecting to it and seeing what it gets.
The exception is if the site is behind something like Cloudflare, which stuff dozens or hundreds of hostnames in a single cert.