SNI is sent in the clear once per tls connection, not once per http request. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		dsp on Nov 3, 2019 \| parent \| context \| favorite \| on: Stop using low DNS TTLs SNI is sent in the clear once per tls connection, not once per http request.

judge2020 on Nov 3, 2019 [–]

While the OP had the wrong method, it still means ISP boxes end up tracking that TLS connection.

mlyle on Nov 3, 2019 | [–]

(Though this is being fixed-- both Firefox and Cloudflare implement the eSNI draft).

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact