top | item 37705596

(no title)

galadran | 2 years ago

I believe CF and others buckled under pressure from major websites which didn't want to be used as fronts for other website's traffic. ECH fixes this because individual sites get to opt-in to using it.

discuss

order

dilyevsky|2 years ago

You could just as easily make df opt-in. Another way is to use “fake” cloudflare-df.com sni just like they are doing with cloudflare-ech.com outer sni

josephcsible|2 years ago

A designated domain for domain fronting is useless because it would immediately get added to every middlebox's list of blocked domains.