Encrypted Client Hello (ECH)

  • Thread starter Thread starter Sushubh
  • Start date Start date
  • Replies Replies 10
  • Views Views 2,739
Updating the status to acknowledge this.

There's work being done to support ESNI in BoringSSL/Chrome, though currently there are a number of things that need to get done before we can launch it. The ESNI spec in the IETF is still undergoing changes and updates, including fairly important robustness changes ( Improve ESNI robustness by davidben · Pull Request #124 · tlswg/draft-ietf-tls-esni ) before we'd feel comfortable with the spec being deployable, DoH support is still being sorted out/rolled out which is critical to get the ESNI records securely, and then we need to get ESNI support into BoringSSL and then Chrome.

We'll probably start having experiments/interop with others in the next quarter or so, and while we are planning/trying to get ESNI fully deployed this year in Chrome, we're prioritizing having a robust protocol for ESNI and then implementation instead of trying to rush it out.

To set expectations, most of our engagement on this topic will continue in the IETF TLS WG. For those curious about support for this feature, engaging in and participating in those highly technical discussions, is the best way to stay current.
Click to expand...

Not coming to Chrome for a while.

908132 - chromium - An open-source project to help move the web forward. - Monorail

bugs.chromium.org bugs.chromium.org
 
I'm using CF DNS and CF ESNI website says ESNI not enabled even though I have set the flags in FF about:config prefs.

I have also enabled ECH now in FF.

Are there any ways to check ECH is working and any websites that support it that I can try?
 

Might be because FF has removed ESNI feature in favour of ECH, and FF ESR is supposed to have ESNI but after installing and configuring that it still shows as ESNI test failed.

Any ideas?

Could it be that CF and Google DNS servers in India have ESNI disabled due to gormint mandate?
 
Yeah saw that link, which is why I tries FF ESR but that didn't work either :-(

Maybe have to wait for ECH to be more widespread.
 

Similar threads

debanjan757
  • Article Article
Hathway asking 15k for a direct connection
2
Replies
27
Views
9,542
Smh
The_PC_Guy
Spectra 1gbps connection user experience
2 3 4 5 6
Replies
77
Views
19,691
mgdelhi
AurobindoSaha
Need help to connect wireless - BSNL Teracom modem / CompUSA Router / Windows Vista (Urgent)
Replies
8
Views
32,395
rsatbf
T
A strange problem with BSNL via ethernet cable ....
2 3
Replies
42
Views
13,516
Just help
Top