Encrypted Client Hello on cloudflare.com?

Website, Application, Performance Security
1

Hello,

After the move from ESNI to ECH (draft-ietf-tls-esni-12), I’m trying to understand and test the ECH feature as announced here Good-bye ESNI, hello ECH! . I’m unable to get ECH config keys from cloudflare.com HTTPS DNS records. I also tried sending a Dummy values to get updated ECH values from cloudflare.com which didn’t work.

I don’t know if I’m doing this right … How can I use this feature properly ?

2

But have you enabled it in your Web browser firstly, if the Web browser is in “developer” or “beta” or “nightly” mode which obviously should have this, either as an experimental feature?

3

I used this GitHub - cloudflare/go: Go with Cloudflare experimental patches with a test golang program I made. It seems that currently crypto.cloudflare.com has ech keys but for cloudflare-esni.com only. Tried them with cloudflare.com, It didn’t work.

4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.