New answers tagged http-proxy
3
Ultimately, it doesn't matter if you assume the attacker can listen to data after the proxy. The proxy will have to send a SNI to the server, which, barring ESNI as you do, has to be in clear text.
If you want to use unencrypted SNI, then the SNI will be sent to the web server in clear text! There's no way around this. You may encrypt it inside another layer ...
Top 50 recent answers are included