Hacker News new | ask | show | jobs
by billyhoffman 3698 days ago
For all browsers made in the last 10 years, SNI is sent as part of the SSL/TLS handshake, so the hostname of the site you are trying to connect to is included in the ClientHello and is visible to anyone that can monitor the network.
1 comments

Hostname, but not path.