np-tokumei

4 ms·

1. 1.▲
   by np-tokumei 5y ago

   yea, they have also disabled/removed ESNI since version 85 https://www.ghacks.net/2021/02/24/the-case-of-the-missing-es... Hopefully ECH will make it this time
2. 2.▲
   by np-tokumei 5y ago

   In the current designs, plaintext domain names are mainly exposed through two channels: the SNI extension in TLS, and traditional DNS name resolutions—the deployment of DoH/DoT is thus a prerequisite for ESNI. Equivalently, the use of
3. 3.▲
   by np-tokumei 5y ago

   Distributing DNS queries across several resolvers is a good idea to make sure there's no single resolver would be able to learn the entire browsing history of a user. However, this distribution algorithm should be designed with care be