Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

TLS ECH (Encrypted Client Hello), formerly known as ESNI (Encrypted Server Name Indication) #4599

Open
Veratyr opened this issue Nov 4, 2018 · 5 comments
Open

TLS ECH (Encrypted Client Hello), formerly known as ESNI (Encrypted Server Name Indication) #4599

Veratyr opened this issue Nov 4, 2018 · 5 comments
Labels
Support data suggestion

Comments

@Veratyr
Copy link

Veratyr commented Nov 4, 2018 •
edited
Loading

More info:

  1. ESNI is already implemented in Firefox
  2. Suggestion for ESNI implementation in Chromium
  3. Tracking ticket for the work to implement ESNI in BoringSSL
  4. IETF ESNI draft (work in progress)
@dimitris-t
Copy link

Cloudflare supports it: https://blog.cloudflare.com/encrypted-sni/
Cloudflare ESNI checker: https://www.cloudflare.com/ssl/encrypted-sni/

@FozzieHi
Copy link
Contributor

FozzieHi commented Aug 5, 2020

Just a quick note: This draft has been renamed to Encrypted Client Hello (ECH) and Firefox doesn't currently support ECH with HTTP/3: https://bugzilla.mozilla.org/show_bug.cgi?id=1654507

@Veratyr Veratyr changed the title ESNI (Encrypted Server Name Indication) TLS ECH (Encrypted Client Hello) [formerly known as ESNI aka Encrypted Server Name Indication] Jul 1, 2021
@Veratyr Veratyr changed the title TLS ECH (Encrypted Client Hello) [formerly known as ESNI aka Encrypted Server Name Indication] TLS ECH (Encrypted Client Hello) [formerly known as ESNI (Encrypted Server Name Indication)] Jul 1, 2021
@Veratyr Veratyr changed the title TLS ECH (Encrypted Client Hello) [formerly known as ESNI (Encrypted Server Name Indication)] TLS ECH (Encrypted Client Hello), formerly known as ESNI (Encrypted Server Name Indication) Jul 1, 2021
@CAfromCA CAfromCA mentioned this issue Jul 8, 2022
Open
@imsys
Copy link

imsys commented Jul 25, 2023

Browser Status Since Source
Chrome Behind Flag v105 https://defo.ie/
Edge Behind Flag v105 https://www.neowin.net/guides/how-to-improve-privacy-in-microsoft-edge-by-enabling-encrypted-client-hello/
Safari NO https://chromestatus.com/feature/6196703843581952
Firefox Behind Flag v85 https://defo.ie/
Opera No info, probably not
IE NO
Chrome for Android Behind Flag v105
Safari on iOS NO
Sansung Internet No info, probably not
Opera Mini NO
Opera Mobile No info, probably not
UC Browser for Android No info, probably not
Android Browser No info, probably not
Firefox for Android Firefox beta behind flag v85
QQ Browser probably not
Baidu Browser probably not
KaiOS Browser probably not

@WebMacke
Copy link

WebMacke commented Jun 4, 2024 •
edited
Loading

Firefox Extension IndicateTLS can show since 7th April and Version 0.3.1 if the current tls connection is using ECH

This is another test page to show if your Browser supports with the current config ECH.

@wallacewill1
Copy link 

```php
/
`
/`

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Support data suggestion
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
7 participants
@Fyrd @imsys @Veratyr @dimitris-t @WebMacke @FozzieHi @wallacewill1