Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

How does deep packet inspection work on encrypted traffic?


Until there's more wide support for Encrypted Client Hello (ECH), the SNI header in the TLS handshake is always sent in plaintext. Between that an unencrypted DNS, most routers can easily spot/log what you're accessing in a browser.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: