3 ms·
Hm, I don't see any mention of ESNI (TLS ECH), is there a good reason it isn't recommended/mandated by the standards?
by Avamander 6y ago
Hm, I don't see any mention of ESNI (TLS ECH), is there a good reason it isn't recommended/mandated by the standards?
- tialaramex 6y agoeSNI isn't finished and time resolutely insists on moving in one direction, so a document which says "Use this thing that will exist in the future" isn't useful today.
- LunaSea 6y agoHasn't it already been implemented in Firefox?
- detaro 6y agothere is an implementation in Firefox (although I don't know if it matches the current state of the spec draft) that unsurprisingly is gated behind an about:config flag.
- dathinab 6y agoisn't finished => the standard of it isn't finished so implementations might not to change quite a bit over time and might not be compatible with each other
- rrll22 6y agoCurrently up to draft-ietf-dnsop-svcb-httpssvc and draft-ietf-tls-esni They're designed more slowly than HTTP3.