5 ms·
but can DIY ever do Oblivious DoH * https://blog.cloudflare.com/oblivious-dns/ https://blog.cloudflare.com/oblivious-dns/ solved the SNI problem if this says
by ck2 4mo ago
but can DIY ever do Oblivious DoH
* https://blog.cloudflare.com/oblivious-dns/ https://blog.cloudflare.com/oblivious-dns/
solved the SNI problem
if this says SNI=plaintext your ISP knows where you are going anyway
* https://one.one.one.one/cdn-cgi/trace https://one.one.one.one/cdn-cgi/trace
- Bender 4mo agoThe goal is to solve that with ECH which requires the person is using DoH. That can be verified here [1] [1] - https://tls-ech.dev/ https://tls-ech.dev/
- ck2 4mo agoah forgot about ECH * https://blog.cloudflare.com/encrypted-client-hello/ https://blog.cloudflare.com/encrypted-client-hello/ what's weird is my ancient version of chrome passes ECH but my Firefox ESR does not have ECH and I cannot figure out how to turn it on in about:config, googling fails me wait! found it, 3rd times the charm network.dns.echconfig.enabled set to TRUE = ECH enabled, passes test * https://www.cloudflare.com/ssl/encrypted-sni/ https://www.cloudflare.com/ssl/encrypted-sni/