You may want to update this respond to with The truth that TLS one.three encrypts the SNI extension, and the most significant CDN is undertaking just that: blog.cloudflare.com/encrypted-sni Naturally a packet sniffer could just do a reverse-dns lookup with the IP addresses you're connecting to.Notic