5 ms·
"... a MITM can simply reset the connection until the client retries with SNI." That doesnt happen when I fetch https://example.com https://example.com without
by aplorbust 8y ago
"... a MITM can simply reset the connection until the client retries with SNI."
That doesnt happen when I fetch https://example.com https://example.com without sending a servername in ClientHello.
For the majority of TLS-enabled websites on the internet, that does not happen. I get the page content just fine witout sending a servername in ClientHello.
But I should send the servername in ClientHello anyway?
This reasoning I am too stupid to understand.