Hi Kurt,
Kurt Roeckx wrote:
The issue is that our ISPs can see the names of the packages that we
download, and i don't think anybody needs to see that. With encrypted
connections this issue would be solved.
Encrypting it will not solve that. It will only make it slightly
harder.
In don't why that should make it only slightly harder. Please explain.
With SNI only the virtual hostname is transfered unencrypted.
The only chance someone has to get an idea is by doing statistical
analysis about the traffic connection. Which should be way more
difficult if persistent connections and pipelining are used.
Additionally, perfect forward secrecy should be used, too.
Except perfect forward secrecy I would expect all of that being pretty
default as soon as HTTPS is used nowadays.
Regards, Axel