See lengthy discussions on the tls-wg list. What definitely works is opportunistic encryption of the SNI name. You could also build something where that is lat

See lengthy discussions on the tls-wg list. What definitely works is opportunistic encryption of the SNI name. You could also build something where that is later authenticated with the server's key and you could raise an alarm if it isn't. Or you could re-use a previously used session key for at least all resumed sessions. Yeah, not perfect, but better than nothing.