News for hackers. Stuff that matters.
Re:RFC 9849. TLS Encrypted Client Hello by szmarczak on Wednesday March 04, 2026 @06:46AM (#47246130)
What you're describing is a SNI, not ECH. Those two serve very different purposes.

> Also reverse lookup has nothing to do with hosting own DNS resolver.

It has everything to do with that. Had you used two brain cells, you would've known that they can memorize the IP address and the domain name, and if you connect to that IP in a short period of time, most likely you visited that domain name.

Re:RFC 9849. TLS Encrypted Client Hello by gzread on Wednesday March 04, 2026 @06:54AM (#47246193)
SNI is unencrypted, so your ISP can see it. ECH encrypts it.
Re:RFC 9849. TLS Encrypted Client Hello by szmarczak on Wednesday March 04, 2026 @06:59AM (#47246247)
How does this relate to my comment?