Yes it does. You can derive the domain from snooping DNS lookups but the URL is part of the encrypted get header.
Ssl doest hide the url you’re visiting
stsquad@lemmy.ml 7 months ago
AProfessional@lemmy.world 7 months ago
The domain is a public part of TLS itself, SNI, for now.
tgxn@lemmy.tgxn.net 7 months ago
Yeah we’re need encrypted SNI. I hear it’s coming soon.
rikudou@lemmings.world 7 months ago
It does. Anyone sniffing the traffic can only see the domain.
hansl@lemmy.world 7 months ago
Not if you use DNSSEC.