ECH/SNI Isolation Through a TLS-in-TLS Tunnel My R&D Proxy Attempt
<p>By Jay Govibe R&D Log</p>
<p>Introduction</p>
<p>In the past weeks, I’ve been experimenting with a concept that sits between cryptography, reverse proxies, and deep network engineering. The idea was simple on paper but extremely complex in practice: to isolate ECH (Encrypted Client Hello) and SNI (Server Name Indication) by using a TLS-in-TLS...
