DNS, SNI and mixed content are all insecure for the vast majority of users. You can learn a lot from HTTPS traffic.