3 ms·
Of course you have to maintain a backwards-compatible gateway proxy. But since most clients will not use it, and since it is obvious that it will be possible t
by teddyh 3y ago
Of course you have to maintain a backwards-compatible gateway proxy. But since most clients will not use it, and since it is obvious that it will be possible to remove it at some time in the future, this is, IMHO, acceptable.
> Besides, weren't the issues with SNI supposed to be solved with ESNI and Encrypted ClientHello?
Has that been implemented and/or standardized yet?
- DistractionRect 3y agoAFAIK that proposal got dropped in favor of ECH, which isn't standardized yet [0]. [0] https://blog.cloudflare.com/announcing-encrypted-client-hello/ https://blog.cloudflare.com/announcing-encrypted-client-hell...
- btdmaster 3y agoAlthough it is not fully standardised, Firefox 119 and later should have it work [1]. It's now up to server implementations to get there as well. [1] https://defo.ie/ech-check.php https://defo.ie/ech-check.php