A server with IP address
a.b.c.d is hosting multiple SSL websites.
When connecting to each website, a proper browser sends a request which include the destination host in an uncrypted clear text known as SNI, such as
After a successful SSL connection, the rest of the data are transmitted with the corresponding certificate.
The problem is, the SNI sent by the browser will be loggable by any MITM, and thus blockable by a government.
How do I prevent the other end from finding out which website I'm visitting on the server?
(Obviously not by using VPN or proxies.)