Hacker News new | ask | show | jobs
by cmeacham98 2089 days ago
To determine which certificate to use the web server needs the client to send it the domain.

To send the domain securely the client needs to know the public key of the certificate the server is using.

This chicken and egg problem has gone unresolved for a long time, and only now are there efforts to fix it (see the work on esni).