• 3 Posts
  • 88 Comments
Joined 11 months ago
cake
Cake day: August 8th, 2023

help-circle











  • To be more precise, my belief is that the main thing ECH does is make it more difficult some of the time (depending on the details of how the site works) for observers of network traffic to directly see which website you’ve visited if it’s one of those that have chosen to give all that data to Cloudflare or some similar system instead.

    There also do still exist some simple web hosting setups that share many independent domain names on the same IP, but I think it’s not as common as it probably was when they first came up with the idea of encrypting the tls server name many years ago. Maybe it’ll make a comeback for sites whose users need to avoid censorship in this way if it’s true that domain fronting has generally become more difficult.


  • Sort of. They can still see which IP address you’re connecting to, which by itself or in combination with some minor traffic analysis is quite often enough to identify which website you’ve visited. Perhaps it isn’t if the website puts absolutely everything through a giant CDN like Cloudflare, but in that case it’s Cloudflare which gets to see all the sites you visit which isn’t a whole lot better than the status quo.

    Still, it’s a little less information given away at least some of the time. Better to do it than not do it.





  • Eh, it depends. If you want maximum privacy then it’s probably a good idea. If you’re aware of the risks, have some trust in your ISP, don’t do anything that’s likely to attract unwanted attention, don’t care about making indiscriminate mass surveillance slightly more difficult, and live in a country where there isn’t too much censorship, then not really.




  • I’d believe about 50% of it. Yes, it’s true that many VPN providers are not completely trustworthy. No, that doesn’t mean that they’re all bad or that none of them are worth using.

    If you have a need for one, take the time to choose carefully. Setting up your own avoids the burden of having to find a good one, but is even more work and comes with some downsides if your aim is to have any protection against people who might want to track you down through your hosting provider.