Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What I understand is that URL is encrypted, including path and parameters in URL and in POST requests. However, the IP address is public, and it's probably quite easy to link an IP address to a website.

There are several websites that offer this service: search an IP and get a list of all known websites that use that IP.

A link to an article from an authority in this field, that really explains this, would be really welcome!!!



This used to be correct, but modern SSL clients support SNI (Server Name Indication), which involves sending the exact hostname in the clear to allow vhosts to have different certificates. The path and everything else in the actual HTTP request is still private, though.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: