Charlotte, North Carolina
74 °F Partially cloudy
Blog
-
Aside
Putting username in SNI makes it *trivial* for anyone listening on the wire to track who and when is communicating
Putting username in SNI makes it *trivial* for anyone listening on the wire to track who and when is communicating with Telegram servers. Add some timing analysis and one can reason about who is talking to whom.
-
Aside
TLS SNI is sent in *clear text*, because it is a mechanism that informs the server hosting multiple websites on
TLS SNI is sent in *clear text*, because it is a mechanism that informs the server hosting multiple websites on a single IP address which TLS certificate to present to the client.
-
Aside
This seems bad. Looks like #Telegram leaks usernames in #TLS SNI: nitter.it/fo0_/status/15…
This seems bad. Looks like #Telegram leaks usernames in #TLS SNI:
nitter.it/fo0_/status/15… -
Aside
This is generous the best way to ruin your site is to spring that modal in 5 seconds. twitter.com/Spellacy/statu…
This is generous the best way to ruin your site is to spring that modal in 5 seconds. twitter.com/Spellacy/statu…