Usually, a browser would not just connect to the vacation spot host by IP immediantely applying HTTPS, there are some earlier requests, that might expose the next data(In case your consumer will not be a browser, it'd behave differently, even so the DNS request is really popular): Can it be a