As of February 2016, we evaluate that sites are giving fashionable HTTPS if they supply TLS v1.2 with a cipher suite that takes advantage of an AEAD manner of operation:xxiaoxxiao 12911 silver badge22 bronze badges one Although SNI isn't supported, an intermediary able to intercepting HTTP connections will typically be able to monitoring DNS issue