4 ms·
> ESNI to the rescue? IIRC, it's now called ECH, because AFAIK the focus changed from "encrypt the SNI" to "encrypt the whole Client Hello".
by cesarb 3y ago
> ESNI to the rescue?
IIRC, it's now called ECH, because AFAIK the focus changed from "encrypt the SNI" to "encrypt the whole Client Hello".
- crotchfire 3y agoUh, no, the focus changed to don't encrypt the outer SNI but pretend we're encrypting something that will prevent filtering, even though it won't.
- infotogivenm 3y agoCan you elaborate? I have not kept up with the eSNI/ECH stuff... How will filtering still be possible?
- lxgr 3y agoIsn't the outer SNI something that can be deduced from the IP address anyway?
- jacooper 3y agoDo you have more details on that ?
- avipars 3y agoComputer Scientists pick the best names for things