Guys, I'm sorry, but due to the virus, Monero devs are asked to stay and work from home.

selsta moneromooo xiphon

ok boss

hyc, you were supposed to bring doughnuts next, so that will carry on when we come back sometime next year

Snipa: this disaster occurred on your watch after pony stepped down. You will go down in history as responsible for the CoronaVirus

rehrar: alright )

I will keep this box of donuts stashed here until we re-convene

rehrar - Excellent, I've been working from home for a week. Always good to know what I'm getting blamed for. :P

my home is a work-free zone

if you work you lose

damn it.. just discovered web browsers when using SSL are sending requested server name in plain text in during the handshake. ClientHello packet -> Server Name Indication extension

Have to, so the server knows which key to use.

wasn't encrypting it supposed to be a part of tls 1.3? :'(

Hmm. I suppose the server could send back a list of vhosts along with the keys, and the client uses the one it likes...

yep, but i naively thought such and information has to be encrypted

so passive adversary won't know which sites (domain names) a user is visiting over HTTPS

If your DNS doesn't leak it :)

tools.ietf.org/html/draft-ietf-tls-esni-06 <-- not sure what the status of this is. apprently firefox supports it already

asymptotically: looks promising

Hmm. Proposed by Cloudflare. The very people who would still have access to that info for most of the web...

i guess it helps sites served by big hosts and cdns like buttflare most. maybe you didn't just transmit getmonero.org in cleartext but you're still connnecting to their ip address

I believe QUIC fixes the problem xiphon talked about, where HTTP does not start until TLS session has been established (don't quote me on that)

also "they" don't need to look at the SNI info if you're just connecting to google/buttflare/bigcorp

this is just one of the main reasons not to do virtual HTTP servers

spectre/meltdown being another significant reason not to share your infrastructre with anyone else

if only i didn't have to sell a kidney or three to get some ipv4 addresses :(

That's just routing though, I think hyc means "sharing memory" in the context of spectre/meltdown :p

the rest, cloudflare proxies intercepting your traffic - I mean seriously, who intentionally builds MITM doors into their protocols?