[conradev]

This is so you do not leak the host through TLS. Using DNS to serve an encryption key.

It’s not just encrypted server name indication (ESNI), it is the whole hello now (ECH)! So you don’t leak anything.