Subject: Re: [TLS] ECH not protect SNI

From: Rob Sayre <[email-masked]>
Date: Tue, 23 Aug 2022 17:49:44 -0700

On Tue, Aug 23, 2022 at 5:45 PM 涛叔 <[email-masked]> wrote:

>
> Some countries and organizations will block website by SNI. If they want,
> the could block all sites protected by
> the common outer SNI domain. All the websites not after some intermediary
> will be blocked more easily, because
> they could not deploy ECH.
>
> This is why I think the current design is not well enough.
>

Hi,

I agree that's basically the standoff here, but it's inherent to the design
of the protocol.

thanks,
Rob