Re: HTTPS-RR and ECH
Michael via curl-library <[email protected]> Thu, 30 Jul 2026 15:13:19 +0500
| Newsgroups | gmane.comp.web.curl.library,gmane.comp.web.curl.general |
|---|---|
| Message-ID | <CAMVeLLL1=TYVn0rdKNUhVxWFNz_4euMm_V+HyLQnz1UEaJCuBw@mail.gmail.com> |
--===============8385496902593892153== Content-Type: multipart/alternative; boundary="00000000000098298c0657d159b7" --00000000000098298c0657d159b7 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable > > > > We want ECH enabled to push online privacy forward. > > Their proposal assumes that relocating network visibility translates to eliminating it. In reality, Encrypted Client Hello (ECH) merely shifts domain-name exposure from a local internet service provider to a centralized CDN edge=E2=80=94such as Cloudflare. From a macro-observability standpoint, exchanging a regional low-fidelity observer for a planetary-scale data hub is a net loss in privacy. A single entity operating at that scale reconstructs traffic patterns across millions of nodes, creating a far more comprehensive telemetry map than any terrestrial ISP could ever dream of building. Calling it "privacy forward" ignores the physics of network centralized surveillance. Beside, i do not agree with c-ares project, so will see imploding it only as a net negative event. --00000000000098298c0657d159b7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_quote"><blockquote cl= ass=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid= rgb(204,204,204);padding-left:1ex"><br><br> We want ECH enabled to push online privacy forward.<br> <br></blockquote><div><p>Their proposal assumes that relocating network vis= ibility translates to eliminating it. In reality, Encrypted Client Hello (E= CH) merely shifts domain-name exposure from a local internet service provid= er to a centralized CDN edge=E2=80=94such as Cloudflare.</p><p>From a macro= -observability standpoint, exchanging a regional low-fidelity observer for = a planetary-scale data hub is a net loss in privacy. A single entity operat= ing at that scale reconstructs traffic patterns across millions of nodes, c= reating a far more comprehensive telemetry map than any terrestrial ISP cou= ld ever dream of building. Calling it "privacy forward" ignores t= he physics of network centralized surveillance.</p><p>Beside<span style=3D"= color:initial">, </span>i do<span style=3D"color:initial"> not agree </span= >with c-ares<span style=3D"color:initial"> project, </span>so will<span sty= le=3D"color:initial"> see=C2=A0</span>imploding<span style=3D"color:initial= ">=C2=A0it=C2=A0</span><span style=3D"color:initial">only as a net negative= event.</span></p></div><div>=C2=A0</div></div></div> </div> --00000000000098298c0657d159b7-- --===============8385496902593892153== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.html --===============8385496902593892153==--