HTTPS traffic is actually easier to track(blog.polygraph.io)
blog.polygraph.io
HTTPS traffic is actually easier to track
http://blog.polygraph.io/2014/10/29/https-traffic-actually-easier-track-http/
3 comments
Wow, very clickbaity. Yes, certificates and SNI are indeed in the clear in the TLS 1.2 ClientHello.
We're hoping to encrypt them for TLS 1.3. That's not easy if SNI is needed for the server to know which certificate to use, and nearly intractable if different vhosts have different cipher prefs.
Solutions welcome!
We're hoping to encrypt them for TLS 1.3. That's not easy if SNI is needed for the server to know which certificate to use, and nearly intractable if different vhosts have different cipher prefs.
Solutions welcome!