4 ms·

ESNI is superseded by a better design and implementation called ECH. It’s still not widely available, but has been available in Firefox. Cloudflare, of course,

ESNI is superseded by a better design and implementation called ECH. It’s still not widely available, but has been available in Firefox. Cloudflare, of course, supports it (Fastly is the third co-author of this). Links (dated January 2021): https://blog.mozilla.org/security/2021/01/07/encrypted-client-hello-the-future-of-esni-in-firefox/ https://blog.mozilla.org/security/2021/01/07/encrypted-clien... https://blog.cloudflare.com/encrypted-client-hello/ https://blog.cloudflare.com/encrypted-client-hello/

1vuio0pswjnm7 5y ago
instead of firefox as the ech client, its possible to use esni/ech-enabled openssl together with proxy, so can use any tcp client, not just web browsers or only certain web browsers. because i use openssl i dont have to wait for firefox releases. the "bleeding edge" ech is not in firefox. the above link says firefox is still stuck on drafts 08 and 09. openssl is on drafts 10 and 13.