xxiaoxxiao 12911 silver badge22 bronze badges one Even when SNI is just not supported, an middleman able to intercepting HTTP connections will normally be capable of checking DNS questions also (most interception is completed close to the customer, like over a pirated consumer router). So that they can see the DNS names.What’s The easiest method