4 ms·
Hm, why not add an encryption-upgrade path to the protocol using the same port? Why must we use another port?
by eatbitseveryday 6y ago
Hm, why not add an encryption-upgrade path to the protocol using the same port? Why must we use another port?
- pas 6y agoAgain, trivially easy to block that. But DoH is real HTTP(S), you cannot really distinguish it from a HTTPS request for wikipedia.org or outlook.com. The SNI hole is slowly being addressed by ESNI - https://www.cloudflare.com/ssl/encrypted-sni/ https://www.cloudflare.com/ssl/encrypted-sni/