Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> so the SNI and Host header already gives it away, TLS or not

Couldn't you just use ech/esni, ISP wouldn't see the domain only IP (and dns provider)?



We can't because nobody supports it. Only firefox has support for esni and it's behind an about:config




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: