7 ms·
Encrypted sni will add some plausible deniability
by homero 8y ago
Encrypted sni will add some plausible deniability
- nly 8y agoIIRC, a prerequisite for the confidentiality of eSNI is in fact secure DNS.
- tialaramex 8y agoYou need that your adversary can't snoop your DNS queries (which DoH and other DPRIVE offerings provide) and if the adversary is active you also need DNSSEC with validation so that the adversary can't lie to your DNS provider and say eSNI isn't available. Cloudflare do both