Hacker News new | past | comments | ask | show | jobs | submit login

An ISP can still see the sites you browse, even if you use HTTPS everywhere and don't use their DNS.

For shared HTTPS hosting (1 IP serving multiple domains), SNI (the domain) is sent in cleartext so the server can pick which configuration to use (SSL cert, etc). For sites that don't use SNI, they can still see you browsed there because without SNI, 1 IP = 1 domain.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: