https://hackerpaper.kaipfister.de/p/1911.00563/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:16:22 GMThttps://news.ycombinator.com/item?id=27774360urn:hackerpapers:mention:1911.00563:27774360Thu, 08 Jul 2021 16:35:04 GMT<p>In the current designs, plaintext domain names are mainly exposed through two channels: the SNI extension in TLS, and traditional DNS name resolutions—the deployment of DoH/DoT is thus a prerequisite for ESNI. Equivalently, the use of DoH/DoT will not provide any meaningful privacy if domain names are still exposed through the (unencrypted) SNI extension in TLS handshake traffic. Recently, there is a push for the deployment of DoH/DoT, with major organizations already supporting it (e.g., Google, Cloudflare, Firefox), though this has not been followed by an equivalent effort for the…</p><p><a href="https://hackerpaper.kaipfister.de/p/1911.00563/">Paper and discussion history</a>. A mention is not an endorsement.</p>cs.CR