Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Matt Nordhoff (mnordhoff@infosec.exchange)'s status on Thursday, 12-Sep-2024 01:00:51 JST Matt Nordhoff

Popular controversial hosting company Cloudflare has been reenabling Encrypted Client Hello (ECH) recently. They had announced it with fanfare and then disabled it again with less fanfare.
Almost all of the popular domains with it enabled look NSFW. :blobshrug:
$ dig +short openstreetmap.org https
1 . alpn="h3,h2" ipv4hint=104.21.88.66,172.67.173.161 ech=AEX+DQBBswAgACCY/JoV+3cuHZdOgYzHZ0SP9Ms+TN3PN8D8vk10GJU/AgAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3030::ac43:ada1,2606:4700:3034::6815:5842
(That domain is not NSFW. Probably.)
Apparently someone noticed and Cloudflare confirmed it 3 weeks ago.
In conversation about a year ago from infosec.exchange permalink
Attachments
1. Domain not in remote thumbnail source whitelist: www.openstreetmap.org
  
  OpenStreetMap
  
  OpenStreetMap is a map of the world, created by people like you and free to use under an open license.

Feeds