3 ms·
Came here to read this. Reminiscent of the early days of Google and it's championing of open standards, right up until their browser became a monopoly. As for C
by dmw_ng 5y ago
Came here to read this. Reminiscent of the early days of Google and it's championing of open standards, right up until their browser became a monopoly. As for CloudFlare, let's not forget their interest in efforts like DNS-over-HTTP and encrypted SNI standards which are in many ways antithetical to decentralization (Firefox DoH resolver turns CF into a giant log of DNS traffic, economics of ESNI encourage centralized megaproviders to terminate TLS traffic in order to avoid revealing site being contacted).
- rhn_mk1 5y agoHow is ESNI any worse than non-encrypted SNI in that regard? If plain SNI was sufficient, then there's no incentive to do anything new, and no difference. If you need to hide, then at least with ESNI, you can operate at all, even if behind one of a few providers (net positive).
- dmw_ng 5y agoPlain SNI did not predicate the existence of megaproviders, in that respect it is better in every way. I don't want to agonize specifics, just to note that when you have the sponsors of a standard being the same folk who stand to benefit the most from it, always call bullshit. This was transparent in the case of ESNI