Hacker News new | ask | show | jobs
by Varloom 973 days ago
With Encrypted Client Hello being rolled out (default on Firefox, optional on chrome/edge with Cloudflare DNS). ISPs can't technically block any website anymore.

They used to block DNS requests, then when secure DNS rolled out, they targeted SNI requests.

But with ECH there is nothing to block except the ip address, which is dynamic and doesn't even belong to the website if it was hosted on a CDN.

1 comments

So Firefox and CloudFlare can block instead.
Firefox can't because you can just change the code to remove the block, but the Mozilla compiled versions very well could. CloudFlare could, and they seem like they very well would because as a company they seem as comically evil as Oracle.