Hacker News Reader

HTTPS does not hinder that type of tracking.. in fact, using SNI (which is unencrypted) would be more accurate than trying to do it with DNS... since it's sent with every request.

View on HN

SNI is sent in the clear once per tls connection, not once per http request.

While the OP had the wrong method, it still means ISP boxes end up tracking that TLS connection.

(Though this is being fixed-- both Firefox and Cloudflare implement the eSNI draft).

https://datatracker.ietf.org/doc/draft-ietf-tls-esni/

Reply on news.ycombinator.com