From: ldo@nz.invalid   
      
   On Thu, 28 Nov 2024 08:52:31 +0000, Richard Kettlewell wrote:   
      
   > DNS + TLS does solve it, sufficiently well. (Using TLS to include   
   > Internet PKI.)   
      
   Nobody uses PKI. TLS has a hole in it, in that the SNI, “Server Name   
   Indication” (the “Host:” line in the HTTP request header) has to be sent   
   unencrypted. This allows eavesdroppers, like authoritarian Government   
   regimes, to determine when you are trying to access a prohibited service,   
   and block it before the encrypted connection can be set up.   
      
   --- SoupGate-DOS v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)