Comment by mitxela

Actually, you could proxy based on SNI alone. They don't, because they want to intercept all your traffic so the NSA gets a copy.