4 ms·

The UK is fighting a losing battle. Right now they snoop SNI headers and terminate connections to banned websites. But ECH is ready to be rolled out

• silon42 4y ago
  ECH can't be mandatory as many enterprises (that take security seriously) will block it, so they'll also be able to. No?
  • TingPing 4y ago
    It will take years but I believe yes it will. SNI was a big privacy mistake. Companies just need new solutions . SNI was never a perfect one.
  • dogleash 4y ago
    Don't most enterprises already use an in house root cert to MITM all https anyway?