[AusNOG] Consultation on s313(3) use

Matt Palmer mpalmer at hezmatt.org
Thu May 5 16:57:21 EST 2016


On Thu, May 05, 2016 at 12:23:21PM +1000, Andrew McN wrote:
> SNI (https://tools.ietf.org/html/rfc6066#section-3) is more or less
> universally used by today's browsers, so the domain name associated with
> the request is in cleartext (at least for the first request in an HTTPS
> Keep-Alive session).

... for now.  There is work afoot to encrypt the SNI extension, too.

- Matt

-- 
"I invented the term object-oriented, and I can tell you I did not have C++
in mind." 	-- Alan Kay



More information about the AusNOG mailing list