On 05/11/2019 13:42, Tom Hughes wrote:
I don't think one CDN deploying a non-standard extension can
reasonably
be described as meaning that SNI is now encrypted.
Yes it is encrypted if you're using a special test version of one
specific browser and you access a site run by one of a handful of
providers that support that on the server side.
Looks like release Firefox does have it now, but not enabled by
default - there is a network.security.esni.enabled configuration
option that would have to be turned on.
Tom
--
Tom Hughes (tom(a)compton.nu)
http://compton.nu/