Anonymized DNSCrypt v2 protocol and eSNI

Question

Anonymized DNSCrypt v2 protocol and eSNI

lrq3000 opened this issue 4 years ago · comments

Stephen Karl Larroque commented 4 years ago

Hello,

I saw that the DNSCrypt v2 protocol intends to provide anonymized DNS requests. On privacytools.io issues tracker, someone mentioned that there may still be an issue with the SNI.

Since this is way above of my head, could someone please maybe clarify that issue? Thank you very much in advance :-)

Frank Denis · Answer 1 · Mon Jun 29 2020 02:34:32 GMT+0800 (China Standard Time)

Browsers still leak websites they are trying to reach due to something called SNI.

This is being addresses in a new protocol called ECHO.

But ECHO is independent from DNSCrypt. This is something that web browsers and web servers have to implement.

ECHO isn't implemented anywhere yet, and the protocol itself is still being finalized.