4 ms·
We have ECH (previously known as ESNI) now, is that not just domain fronting in a new form?
by Avamander 4y ago
We have ECH (previously known as ESNI) now, is that not just domain fronting in a new form?
- theCrowing 4y agoOnly for the legal stuff... so you will still get complaining comments.
- cesarb 4y agoNo, because with ECH/ESNI the hostname in both layers (the TLS connection and the HTTP Host header) still matches. The only difference is that the hostname on the both layers is no longer visible on the wire, while without ECH/ESNI the hostname on one layer (the HTTP Host header) is hidden but the hostname in the other layer (the TLS connection) is visible. And you could still do domain fronting even with ECH/ESNI (making the hostname on each layer differ), though it would be kind of pointless.