• pazukaza@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    Wouldn’t it be better if reverse proxies simply had a “default key” meant to encrypt the SNI after an unencrypted “hello” is received?

    Including DNS in this seems weird.