Re: HTTPS-RR and ECH

Michael via curl-library <[email protected]> Thu, 30 Jul 2026 15:13:19 +0500
Newsgroups gmane.comp.web.curl.library,gmane.comp.web.curl.general
Message-ID <CAMVeLLL1=TYVn0rdKNUhVxWFNz_4euMm_V+HyLQnz1UEaJCuBw@mail.gmail.com>
--===============8385496902593892153==
Content-Type: multipart/alternative; boundary="00000000000098298c0657d159b7"

--00000000000098298c0657d159b7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

>
>
>
> We want ECH enabled to push online privacy forward.
>
> Their proposal assumes that relocating network visibility translates to
eliminating it. In reality, Encrypted Client Hello (ECH) merely shifts
domain-name exposure from a local internet service provider to a
centralized CDN edge=E2=80=94such as Cloudflare.

From a macro-observability standpoint, exchanging a regional low-fidelity
observer for a planetary-scale data hub is a net loss in privacy. A single
entity operating at that scale reconstructs traffic patterns across
millions of nodes, creating a far more comprehensive telemetry map than any
terrestrial ISP could ever dream of building. Calling it "privacy forward"
ignores the physics of network centralized surveillance.

Beside, i do not agree with c-ares project, so will see imploding it only
as a net negative event.

--00000000000098298c0657d159b7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_quote"><blockquote cl=
ass=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid=
 rgb(204,204,204);padding-left:1ex"><br><br>
We want ECH enabled to push online privacy forward.<br>
<br></blockquote><div><p>Their proposal assumes that relocating network vis=
ibility translates to eliminating it. In reality, Encrypted Client Hello (E=
CH) merely shifts domain-name exposure from a local internet service provid=
er to a centralized CDN edge=E2=80=94such as Cloudflare.</p><p>From a macro=
-observability standpoint, exchanging a regional low-fidelity observer for =
a planetary-scale data hub is a net loss in privacy. A single entity operat=
ing at that scale reconstructs traffic patterns across millions of nodes, c=
reating a far more comprehensive telemetry map than any terrestrial ISP cou=
ld ever dream of building. Calling it &quot;privacy forward&quot; ignores t=
he physics of network centralized surveillance.</p><p>Beside<span style=3D"=
color:initial">, </span>i do<span style=3D"color:initial"> not agree </span=
>with c-ares<span style=3D"color:initial"> project, </span>so will<span sty=
le=3D"color:initial"> see=C2=A0</span>imploding<span style=3D"color:initial=
">=C2=A0it=C2=A0</span><span style=3D"color:initial">only as a net negative=
 event.</span></p></div><div>=C2=A0</div></div></div>
</div>

--00000000000098298c0657d159b7--

--===============8385496902593892153==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html

--===============8385496902593892153==--