Lightweight alternatives to Google Analytics

Posted Jun 22, 2020 14:58 UTC (Mon) by anarcat (subscriber, #66354)
In reply to: Lightweight alternatives to Google Analytics by pabs
Parent article: Lightweight alternatives to Google Analytics

> IIRC for SSH the solutions to this are either separate SSH agents per identity or the IdentitiesOnly option.

I suspect near-absolutely no one does this...

> I guess if web browsers wanted to they could easily mitigate this by pinning each cert to the domain it was created for and only ever sending it to that domain.

Assuming they cared about client certs at all...

> Also, I wonder if the client cert is in the clear in the TLS handshake, or if Encrypted Client Hello (new name for ESNI) is needed to hide them.

I would assume the worse. ;)