Hacker News new | ask | show | jobs
by shaky-carrousel 1416 days ago
My ISP analyzes the SNI headers. I really need Encrypted Client Hello.
2 comments
O__________O 1416 days ago
For others not familiar with SNI vs ECH, Cloudflare has a post on it:

https://blog.cloudflare.com/encrypted-client-hello/

link
shaky-carrousel 1414 days ago
I really really like how your username looks.
link
ignoramous 1416 days ago
Cloudflare Workers supports ECH out of the box. Also, one can deploy serverless-dns against any sub-domain that's available with underlying provider (mydoh.workers.dev, yourdoh.deno.dev, dohapp.fly.dev, etc) and keep changing the sub-domain for free to defeat SNI-based censorship.
link