Hacker GitHub

← All repos

kontaxis/snidump

View on GitHub ↗ ★ 115 C

This is a tcpdump-like program for printing TLS SNI and HTTP/1.1 Host fields in live or captured traffic.

5 mentions on Hacker News by 1 person: 0 stories, 5 comments · first 2020-12-08 · latest 2025-06-08

Mentions per year 5 mentions · busiest year 2021 (2)
20082026
AllStoriesComments NewestTopOldest
  1. …certainly supports TLS. It does not support ECH. Neither does news.ycombinator.com 1. Test: https://github.com/kontaxis/snidump 2. Test: https://test.defo.ie
    comment by 1vuio0pswjnm7 · 2025-06-08 · in Why not use DNS over HTTPS (DoH)?
  2. https://github.com/kontaxis/snidump Try running snidump for a day while reading HN, including (With SNI) firefox https://www.thebignewsletter.com/p/judge-rules-apple-executive-lied Have a look at the snidump output. Then restart snidump…
    comment by 1vuio0pswjnm7 · 2025-05-01 · in Judge rules Apple executive lied under oath, makes criminal contempt referral
  3. …required! (Most HTTPS site submitted to HN do not require SNI.) To see how SNI leaks host names, https://github.com/kontaxis/snidump # example.com - with no SNI echo -e "GET / HTTP/1.1\r\nHost: example.com\r\nConnection:…
    comment by 1vuio0pswjnm7 · 2021-10-20 · in 32 Bit Real Estate
  4. …are stupid. They are sending domain names in the clear even when the website is not using SNI. https://github.com/kontaxis/snidump
    comment by 1vuio0pswjnm7 · 2021-01-08 · in Encrypted Client Hello: The Future of ESNI in Firefox
  5. …it. As such, one can get a list of names by snooping on HTTPS traffic, instead of DNS traffic: https://github.com/kontaxis/snidump ESNI-enabled software and Clouflare's ESNI-enabled CDN is an option, but you have to keep making DNS queries…
    comment by 1vuio0pswjnm7 · 2020-12-08 · in Improving DNS Privacy with Oblivious DoH