News for hackers. Stuff that matters.

A comment on Improving DNS Privacy with Oblivious DoH. Parent comment

Re:Improving DNS Privacy with Oblivious DoH by kelnos on Wednesday December 09, 2020 @01:06AM (#25355818)
For now. Encrypted SNI is in development and will eventually be used by devices and apps that want to do this sort of thing and hide what they're doing.
[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by fiddlerwoaroof on Wednesday December 09, 2020 @01:35AM (#25355952)
The solution to that is pretty simple. ESNI, I believe, requires encryption keys in DNS records: if you control DNS, you control ESNI. ECH might be harder to deal with, but you can always just block HTTPS connections you don’t want to support. Also, will some sort of certificate fingerprinting still work?
[ Parent | on HN ]