You may want to update this reply with The point that TLS one.three encrypts the SNI extension, and the greatest CDN is accomplishing just that: website.cloudflare.com/encrypted-sni Not surprisingly a packet sniffer could just do a reverse-dns lookup to the IP addresses you're connecting to.You need