3 ms·

This wouldn't be possible with dnssec right?

• Anunayj 3y ago
  Yes, however it defeats one of the main point of ECH, that is encrypting the SNI. Since the domain is leaked in plaintext DNS.
  • jacooper 3y ago
    Why? You can just use DNS-over-TLS/HTTPS + dnssec + ECH + TLSv1.3 and then you should have a unblockable website(outside of IP address bans).
    • Anunayj 3y ago
      Ah yes, sorry I thought you meant can't we just use plaintext DNS + DNSSEC.