You might want to update this respond to with The point that TLS 1.3 encrypts the SNI extension, and the most important CDN is accomplishing just that: site.cloudflare.com/encrypted-sni Of course a packet sniffer could just do a reverse-dns lookup to the IP addresses you happen to be connecting to. Note https://alexisnqiaq.blogsvila.com/37902526/top-https-jdmengineforsale-com-product-jdm-mitsubishi-turbo-4g63t-engine-for-sale-secrets