I don't see how you think NSI doesn't nullify https everywhere.
"we need MitM for performance". listen to yourself. if some optimization breaks security, you do not optimize.
"we need MitM for performance". listen to yourself. if some optimization breaks security, you do not optimize.
It doesn't. SNI doesn't leak the URL being accessed, or anything that isn't encoded in the hostame.