Microsoft bakes a VPN into Edge and turns it on

Re:Microsoft bakes a VPN into Edge and turns it on by uup on Friday September 30, 2022 @01:11PM (#33037572)

You could use DoH, which you should do anyway. No reason to leak DNS lookups to anyone.

[ Parent | on HN ]

Re:Microsoft bakes a VPN into Edge and turns it on by madars on Friday September 30, 2022 @01:32PM (#33037927)

DoH alone is not enough due to https://en.wikipedia.org/wiki/Server_Name_Indication being sent in plain text. Some day ECH (formerly, eSNI) should help with that.

[ Parent | on HN ]

Re:Microsoft bakes a VPN into Edge and turns it on by erinnh on Friday September 30, 2022 @04:28PM (#33040349)

I thought TLSv1.3 already encrypted the SNI?

[ Parent | on HN ]

Re:Microsoft bakes a VPN into Edge and turns it on by detaro on Saturday October 01, 2022 @09:17AM (#33046375)

No. ESNI is an later-created extension to TLS 1.3

[ Parent | on HN ]

Re:Microsoft bakes a VPN into Edge and turns it on by uup on Saturday October 01, 2022 @06:58AM (#33045618)

It does

[ Parent | on HN ]

Re:Microsoft bakes a VPN into Edge and turns it on by Varloom on Sunday October 02, 2022 @04:09PM (#33059695)

ESNI is not implemented yet on any website. And there is no software support except beta versions of Chrome/Edge and you have to manually toggle flags in dev mode.

All SNIs are passed as plain text to your ISP/VPN, even with DoH/TLS secure DNS enabled.

[ Parent | on HN ]

Re:Microsoft bakes a VPN into Edge and turns it on by ranger_danger on Friday September 30, 2022 @01:39PM (#33038024)

you'll always be leaking it to whoever you are sending your query to.

[ Parent | on HN ]