3 ms·
But what’s the alternative to SNI for multiple domains on one IP? And don’t say IPv6, because my ISP doesn’t even offer that yet…
by Semaphor 5y ago
But what’s the alternative to SNI for multiple domains on one IP? And don’t say IPv6, because my ISP doesn’t even offer that yet…
- kelnos 5y agoESNI with TLSv1.3. (The "E" means "encrypted".)
- Semaphor 5y agoThat does sound nice, but apparently it’s already been succeeded by TLS ECH, and neither of them are widely enabled by default, so essentially there is currently no SNI alternative.
- 1vuio0pswjnm7 5y agoESNI (now called ECH): https://defo.ie https://defo.ie I use ESNI-enabled openssl from github.com/sftcd, 30 Aug 2019 release, for all HTTP requests to Cloudflare-hosted sites and it works well. A noticeable downside is one has to keep fetching a new key in a DNS TXT RR every hour. Another use for DoH; the key can re retrieved via DoH (no SNI required).