3 ms·
Draft only. OpenSSL doesn't support it - because it's still a draft. So as of now, ESNI does not provide anything.
by gsich 7y ago
Draft only. OpenSSL doesn't support it - because it's still a draft. So as of now, ESNI does not provide anything.
- snek 7y agoIt is moving forward, albeit slowly. With or without DoH/DoT, non encrypted SNI is a problem, and DoH/DoT have privacy improvements in their own right.
- gsich 7y ago"moving forward" doesn't help anyone. Standards and more importantly, implementations count. In every DoH/DoT discussion there is someone who mentions ESNI, but without major level support this is a vague promise. Of course DNS encryption is still useful even without ESNI.