Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> SNI is not part of the request ... SNI is part of the response from the server back to the client.

SNI is sent by the client, in the request, at the TLS layer.

It's purpose is to let the server know which certificate it should use to respond to the request.



Not in the request but as part of connection establishment (ClientHello). At that point in time the protocol (eg http/1 or /2 or something completely different) isn’t even determined - and so no [http] request exists yet.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: