Comment by achernya

That is not sufficient -- TLS Server Name Indication (SNI) is still cleartext in the handshake.