xxiaoxxiao 12911 silver badge22 bronze badges one Even when SNI isn't supported, an intermediary capable of intercepting HTTP connections will frequently be able to monitoring DNS queries as well (most interception is done close to the customer, like on the pirated person router). In order that they can see the DNS names.Regarding cache, most moder