apkpure.com is blocked on multiple Indian ISPs

[Sushubh]

Ech is basically the new name for ESNI.

 

[pranav sharma]

@JB701 i am excitel user no probs here

firefox has tls ech. it is very hard to get around it. chrome is yet to add support for it.

any method to use on adguard with cloudflare or any other dns?

 

[Sushubh]

Ech is not based on dns AFAIK. Both the website and the browser has to support it.

 

[alfaz_rayin]

https version working fine here on MTNL which also uses Tata. http version throws the error shown on 1st page.

 

[kage]

Ech is basically the new name for ESNI.

Indeed.
FF seems to have completely moved over to ECH in their latest beta.
Although, for versions <85.0 they still require to turn on "network.dns.echconfig.enabled" for it to take effect.

I'd still rather be with ESNI until more websites start implementing the new draft. That beta change is highly controversial right now.

 

[Sushubh]

From my understanding, enabling ech on websites is quite complicated so no one really does it. So most domain you would hit would be all on Cloudflare where most wouldn't even know that they have such a tech enabled by default on their domains.

Good-bye ESNI, hello ECH!

A deep dive into the Encrypted Client Hello, a standard that encrypts privacy-sensitive parameters sent by the client, as part of the TLS handshake.

blog.cloudflare.com

 

[kage]

Ah cloudflare's already on board huh. I didn't realize!
That should alleviate much of the adoption issues then.

Thanks for the info!

 

[Sushubh]

CloudFlare essentially introduced ESNI to the web. They enabled it on all domains on their network by default and from my understanding, there is no backend option to disable it. Firefox added support around the same time. Both organizations basically worked together on the rollout from what I remember. There are some guides available online to enable draft version of ESNI if you don't want to use CloudFlare. It's likely 99.9% of ESNI/ECH enabled domains on the web right now are basically Cloudflare powered.

Google is waiting for the standard to reach a stable point before it is added to Chrome. Firefox and Cloudflare's implementations are based on early development stage.

 

[blueman24]

Can't wait for tech like ECH to become mainstream. Would be interesting to see the fireworks with regards to government's and ISP's when they realize that their censorship crap stopped working.

 

[JB701]

They can straight up block sites with ECH if they want. Even if they don't know whats inside, they can still know if its encrypted or not and block it.