3 ms·
yup, will have to block eSNI (disable all hosts on firewall unless looked up on local DNS, per application)
by silon42 5y ago
yup, will have to block eSNI (disable all hosts on firewall unless looked up on local DNS, per application)
- josephcsible 5y agoMaybe this will bring back a form of domain fronting. Let the user put in a list of hosts that your tyrannical dictatorship allows through its firewall, and then do a fake DNS lookup through your local DNS server for them, then use the resulting IP to access other hosts on the same CDN.