Comment by ck2
6 days ago
but can DIY ever do Oblivious DoH
* https://blog.cloudflare.com/oblivious-dns/
solved the SNI problem
if this says SNI=plaintext your ISP knows where you are going anyway
6 days ago
but can DIY ever do Oblivious DoH
* https://blog.cloudflare.com/oblivious-dns/
solved the SNI problem
if this says SNI=plaintext your ISP knows where you are going anyway
The goal is to solve that with ECH which requires the person is using DoH. That can be verified here [1]
[1] - https://tls-ech.dev/
ah forgot about ECH
* https://blog.cloudflare.com/encrypted-client-hello/
what's weird is my ancient version of chrome passes ECH
but my Firefox ESR does not have ECH and I cannot figure out how to turn it on in about:config, googling fails me
wait! found it, 3rd times the charm
set to TRUE = ECH enabled, passes test
* https://www.cloudflare.com/ssl/encrypted-sni/