xxiaoxxiao 12911 silver badge22 bronze badges one Even when SNI is just not supported, an middleman able to intercepting HTTP connections will usually be capable of monitoring DNS questions as well (most interception is done close to the consumer, like on a pirated user router). In order that they can see the DNS names.Enhancements you chose are no