3 ms·
Note that isn't the case any more with modern browser + server, TLS 1.3 Encrypted Client Hello (ECH) fixes this.
by dtech 5y ago
Note that isn't the case any more with modern browser + server, TLS 1.3 Encrypted Client Hello (ECH) fixes this.
- caskstrength 5y agoLast time I checked TLS Encrypted Client Hello standard was still under heavy development and implementation in Firefox was disabled by default. Is this not the case anymore?
- silon42 5y agoIMO, it's a bad design... SNI encryption should be done by firewall, not the client.
- dtech 5y agoMy mistake, it seems to still be a draft standard
- brewmarche 5y agoBoth this draft and eSNI unfortunately are not widely in use.