Hacker News Reader

Anyone know if the book covers ESNI? Or if there's a good resource on how to set that up with Nginx, CloudFlare DNS, and Let's Encrypt?

EDIT: Okay, it looks like this is not yet ready for most people to use.

View on HN

Encrypted Client Hello, which is what eSNI developed into, is an active draft for the TLS working group. If you have relevant expertise I'm sure that the group would be happy to have you, in particular if you have any insight into how to achieve goals like Don't Stand Out while also keeping ECH as simple as possible.

https://www.youtube.com/watch?v=AIDnO_QB64A is the most recent interim video conference meeting on this topic.

I expect that during 2021 they'll pin down the more controversial parts that remain to be done.

https://defo.ie

As an end user, I have been using ESNI-enabled openssl to make HTTP requests to sites using Cloudflare and for me it works great.

Reply on news.ycombinator.com