If your ISP is large enough it is only sent to ISP's name server which probably ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

folmar on Dec 5, 2020 | parent | context | favorite | on: 72% of smart TVs and 46% of game consoles hardcode...

If your ISP is large enough it is only sent to ISP's name server which probably has everything you need cached, and if it isn't it might blend in with other queries. And your ISP can sniff SNI or guess target domains from target IPs already.

judge2020 on Dec 6, 2020 [–]

Which is also being worked on via esni (now ECH for encrypted client hello) - https://crbug.com/boringssl/275

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact