3 ms·
ESNI cannot come fast enough.
by fuzzy2 4y ago
ESNI cannot come fast enough.
- raxxorraxor 4y agoYes, we really need that. Glad we have TLS and questionable ambitions show that it doesn't even reach deep enough. Although the way the web works a web request to domain.xy doesn't mean much anyway but people still believe in it. Also MITM attacks in IT security should be shunned and I believe the users need to be informed about it when they happen. IT could potentially steal banking information. I believe this to be highly illegal in my country and still a data breach even if an employee wasn't allowed to do the transaction because it was private.
- slowmovintarget 4y agoIsn't ECH the new new? https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni-08 https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni-08
- Avamander 4y agoIt's ECH now, Chromium/Google are actively working in it. So soon™ In addition to that we need ODoH and NTS as well. It's pretty clear neither countries or ISPs (not to mention attackers) can keep their grubby fingers out of anything unencrypted. MITM should be visible or impossible.