You might want to update this solution with The point that TLS one.three encrypts the SNI extension, and the largest CDN is accomplishing just that: weblog.cloudflare.com/encrypted-sni Obviously a packet sniffer could just do a reverse-dns lookup to the IP addresses you're connecting to. Notice on the other hand (as also https://jacquest170dbb4.shopping-wiki.com/user