undefined | Better HN

0 pointsx86_64Ubuntu5y ago0 comments

I had no clue the URL was encrypted too. So how does DNS work? Or does it send through plaintext the name of the server, and the rest of the URL has to be encrypted by the endpoint.

0 comments

hannasanarion5y ago

The domain name is not encrypted, but the path and querystring are.

So, a spy watching your https traffic knows that you're interacting with news.ycombinator.com (and possibly other things), but they don't know anything that goes after the `/`: which thread, whether you're POSTing or GETting, or of course any of the content.

j / k navigate · click thread line to collapse

0 pointsx86_64Ubuntu5y ago0 comments

I had no clue the URL was encrypted too. So how does DNS work? Or does it send through plaintext the name of the server, and the rest of the URL has to be encrypted by the endpoint.

0 comments

hannasanarion5y ago

The domain name is not encrypted, but the path and querystring are.

j / k navigate · click thread line to collapse