Hacker News new | ask | show | jobs
by 1oooqooq 779 days ago
I don't see how you think NSI doesn't nullify https everywhere.

"we need MitM for performance". listen to yourself. if some optimization breaks security, you do not optimize.

1 comments

> I don't see how you think NSI doesn't nullify https everywhere.

It doesn't. SNI doesn't leak the URL being accessed, or anything that isn't encoded in the hostame.