FlickeringScreens@lemmy.world to Privacy@lemmy.worldEnglish · 10 months agoIs it true that only the website name is visible to ISPs?message-squaremessage-square1fedilinkarrow-up10arrow-down10file-text
arrow-up10arrow-down1message-squareIs it true that only the website name is visible to ISPs?FlickeringScreens@lemmy.world to Privacy@lemmy.worldEnglish · 10 months agomessage-square1fedilinkfile-text
minus-squarecum@lemmy.cafelinkfedilinkEnglisharrow-up1·10 months agoYes, https hides most things but leaks the sni (server name indicator. We came up with a solution called esni (encrypted sni), but that also had issues. It didn’t have much adoption before esni got replaced with ech (encrypted hello). Cloudflare actually has a neat website to check if your browser is supporting ech. You can learn more about it here, it’s pretty cool! https://blog.cloudflare.com/handshake-encryption-endgame-an-ech-update/
Yes, https hides most things but leaks the sni (server name indicator. We came up with a solution called esni (encrypted sni), but that also had issues. It didn’t have much adoption before esni got replaced with ech (encrypted hello). Cloudflare actually has a neat website to check if your browser is supporting ech.
You can learn more about it here, it’s pretty cool! https://blog.cloudflare.com/handshake-encryption-endgame-an-ech-update/