Nah, they're just going to block the whole ECH handshake.

Idk about Iran, but Russia and China just block eSNI, QUIC and whatever their DPI firewalls can't really handle on the fly.

The idea is to make ECH too large of a target to make blocking it practical. If you block ECH you end up blocking access to a large portion of the internet in that region. It's why some major browsers have chosen to not gracefully fallback to non-ECH handshakes upon connection failure.

Greetings, residents of Arstotzka! To access Arstotzkan government websites, please install this Ministry of Digits TLS root certificate on all your devices. Also, all new phones sold in Arstotzka must have the certificate preinstalled, starting from 2025.

I think the other poster was implying that the governments don’t care.

Yeah we shall see - we're monitoring closely

Disagree on this take. Blocking services does have an economic impact.

This alongside people smuggling in starlink is making censorship useless.

China blocks services all the time. I was one of the original 10 blocked by the great firewall of china.

And starlink can be traced. It’s only time before some people start getting arrested.

I’m not talking about China. China has well made internal alternatives to most western services.

Iran does not.

Freedom of information is an existential threat to authoritarian states. There is no amount of money they're not willing to give up if it mean they stay in power.

That's said, it will not come to that. They'll just mandate spyware installation.

Many such countries already block traffic with ECH entirely. There's no technical solutions to a polical problem.

I remember when you can just change your DNS provider to bypass censorship. Nowadays, browsers and OS provide safe DNS by default, and thus censors had mostly switched to DPI based method. As this cat and mouse game continue, inevitably these governments will mandate spyware on every machine.

These privacy enhancements invented by westerner only work for western citizens threat model.