News for hackers. Stuff that matters.

A comment on Encrypted Client Hello – the last puzzle piece to privacy. Parent comment

Re:Encrypted Client Hello – the last puzzle piece to privacy by YeBanKo on Friday September 29, 2023 @06:27PM (#37710833) 

  > You can do something like ECH in a way that not even Cloudflare will see it
How is it possible for a Cloudflare to front a website, without knowing what the website it is. You browser is only supposed to do a handshake with a server with a certificate matching the domain, this make Cloudlare in charge of the cert. And Cloudflare needs to forward the traffic to a known location, so they __have__ to know the target host.
[ Parent | on HN ]
Re:Encrypted Client Hello – the last puzzle piece to privacy by AnthonyMouse on Friday September 29, 2023 @06:32PM (#37710873)
it being the connection contents rather than the name, since Cloudflare actually needs the name to route the connection
[ Parent | on HN ]