> You can do something like ECH in a way that not even Cloudflare will see it How is it possible for a Cloudflare to front a website, without knowing what the

> You can do something like ECH in a way that not even Cloudflare will see it How is it possible for a Cloudflare to front a website, without knowing what the website it is. You browser is only supposed to do a handshake with a server with a certificate matching the domain, this make Cloudlare in charge of the cert. And Cloudflare needs to forward the traffic to a known location, so they __have__ to know the target host.