News for hackers. Stuff that matters.

A comment on TLS Mastery.

Re:TLS Mastery by ancarda on Sunday April 11, 2021 @10:10AM (#26770482)
Anyone know if the book covers ESNI? Or if there's a good resource on how to set that up with Nginx, CloudFlare DNS, and Let's Encrypt?

EDIT: Okay, it looks like this is not yet ready for most people to use.

[ Parent | on HN ]
Re:TLS Mastery by tialaramex on Sunday April 11, 2021 @03:01PM (#26772570)
Encrypted Client Hello, which is what eSNI developed into, is an active draft for the TLS working group. If you have relevant expertise I'm sure that the group would be happy to have you, in particular if you have any insight into how to achieve goals like Don't Stand Out while also keeping ECH as simple as possible.

https://www.youtube.com/watch?v=AIDnO_QB64A is the most recent interim video conference meeting on this topic.

I expect that during 2021 they'll pin down the more controversial parts that remain to be done.

[ Parent | on HN ]
Re:TLS Mastery by 1vuio0pswjnm7 on Sunday April 11, 2021 @04:46PM (#26773261)
https://defo.ie

As an end user, I have been using ESNI-enabled openssl to make HTTP requests to sites using Cloudflare and for me it works great.

[ Parent | on HN ]