Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You don't need to decrypt TLS to know where it's going. SNI leaks the domain in plaintext and if SNI isn't enabled you can just use the IP address.


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: