In principle I hate the idea of overbearing corporate IT restrictions, but I think this is a big improvement over using MITM proxies and intercepting HTTPS conn

In principle I hate the idea of overbearing corporate IT restrictions, but I think this is a big improvement over using MITM proxies and intercepting HTTPS connections. This seems like a good compromise that will enable IT admins to get the control they desire while still giving users access to privacy preserving technologies like HTTPS with ECH.