Hacker News Reader

ECH seems to have been rolled out in browsers as dev features so idk what the real blocker is anymore.

Edit: it looks like as of late May if you enable some dev flags in Firefox any site behind Cloudflare should use ECH.

The evolution of ESNI into ECH has been slow but basically encryption of just the SNI would not play nicely with the rest of the protocol. So more had to be encrypted but that meant a deeper interaction to analyze.

It's also dependent on a new kind of DNS record and the original design wasn't great for DNS load balancing. Some tweaking had to happen there too.

there was a pushback from vendors who drumroll.... sell dpi