> I don't see how you think NSI doesn't nullify https everywhere.
It doesn't. SNI doesn't leak the URL being accessed, or anything that isn't encoded in the hostame.
It doesn't. SNI doesn't leak the URL being accessed, or anything that isn't encoded in the hostame.
No comments yet.