3 ms·
No, because with ECH/ESNI the hostname in both layers (the TLS connection and the HTTP Host header) still matches. The only difference is that the hostname on t
by cesarb 4y ago
No, because with ECH/ESNI the hostname in both layers (the TLS connection and the HTTP Host header) still matches. The only difference is that the hostname on the both layers is no longer visible on the wire, while without ECH/ESNI the hostname on one layer (the HTTP Host header) is hidden but the hostname in the other layer (the TLS connection) is visible. And you could still do domain fronting even with ECH/ESNI (making the hostname on each layer differ), though it would be kind of pointless.