4 ms·
IIRC, a prerequisite for the confidentiality of eSNI is in fact secure DNS.
by nly 8y ago
IIRC, a prerequisite for the confidentiality of eSNI is in fact secure DNS.
- tialaramex 8y agoYou need that your adversary can't snoop your DNS queries (which DoH and other DPRIVE offerings provide) and if the adversary is active you also need DNSSEC with validation so that the adversary can't lie to your DNS provider and say eSNI isn't available. Cloudflare do both