Yeah, it’s the next step of https in essence, unrelated to dns. Browsers have had it for about 2 years now. Of course websites also need to support it to get any benefit.
DNS is already “solved” via DOH, which for adblocking purposes you can disable or point to your own dns server.
ECH, this thing here, makes domain blocks impossible. Without it, advanced routers can use packet inspection to block connections to say example.org. With it, they would need to block IPs serving example.org, which would also block all other domains hosted frommthose IPs. Especially websites on big CDNs like cloudflare are essentially unblockable, you’d take down like 30% of the internet if you tried to block a single page on there.
Without ehc, traffic is indistinguishable between websites. With, it’s indistinguishable between servers.
Yeah, it’s the next step of https in essence, unrelated to dns. Browsers have had it for about 2 years now. Of course websites also need to support it to get any benefit.
DNS is already “solved” via DOH, which for adblocking purposes you can disable or point to your own dns server.
ECH, this thing here, makes domain blocks impossible. Without it, advanced routers can use packet inspection to block connections to say example.org. With it, they would need to block IPs serving example.org, which would also block all other domains hosted frommthose IPs. Especially websites on big CDNs like cloudflare are essentially unblockable, you’d take down like 30% of the internet if you tried to block a single page on there.
Without ehc, traffic is indistinguishable between websites. With, it’s indistinguishable between servers.