3 ms·

> Encrypted SNI is solves exactly that and is becoming increasingly common. Can you please elaborate? I know only this: https://serverfault.com/questions/9763

by acqq 7y ago

> Encrypted SNI is solves exactly that and is becoming increasingly common. Can you please elaborate? I know only this: https://serverfault.com/questions/976377/how-can-i-set-up-encrypted-sni-on-my-own-servers https://serverfault.com/questions/976377/how-can-i-set-up-en... "Encrypted Server Name Indication (ESNI) is still an Internet Draft, you will not find it in any major server implementation as it is subject to change. In fact, the draft version implemented by Firefox supports draft-ietf-tls-esni-01 which is incompatible with newer draft versions." Edit: I see Firefox Nightly is mentioned, it is the version that normal users who use Firefox (Firefox has at the moment less than 5% worldwide marker share) just don't use (it annoyingly updates every night).

Someone1234 7y ago
Cloudflare's entire network supports it and Firefox Nightly can consume it see: https://blog.cloudflare.com/encrypted-sni/ https://blog.cloudflare.com/encrypted-sni/ That means over 10% of the internet's traffic supports ESNI (even if <1% of clients consume it regularly). We're also seeing additional vendors explore ESNI, including Chrome's team who have said they will look into implementing it when the spec is finalized.
judge2020 7y ago
It's a draft, which means it's being pushed towards being standardized. Currently you can enable it in Firefox and Cloudflare will negotiate with eSNI. Chances are this will break some middleboxes once Chrome rolls out the standard [after the standard is finalized].
deleted 7y ago
[deleted]
jdc 7y ago
Look for network.security.esni.enabled in your Firefox config and set it true and you should be good to go.