Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://social.librem.one/users/guardianproject/statuses/111424889274209375">Guardian Project (guardianproject@social.librem.one)'s status on Friday, 17-Nov-2023 19:26:39 JST</a><a href="https://social.librem.one/@guardianproject" title="guardianproject@social.librem.one"><img src="https://gnusocial.jp/avatar/153731-48-20230726142129.webp" width="48" height="48" alt="Guardian Project" style="position: absolute; left: 0; top: 0;">Guardian Project</a></section><article><p>We have started the second round of our partnership <a href="https://defo.ie" rel="nofollow noreferrer">https://defo.ie</a> to ensure that the new <a href="https://social.librem.one/tags/TLS" rel="tag">#TLS</a> standard called <a href="https://social.librem.one/tags/EncryptedClientHello" rel="tag">#EncryptedClientHello</a> (<a href="https://social.librem.one/tags/ECH" rel="tag">#ECH</a>) works for public interest use cases. We also are working to reduce the pressure towards <a href="https://social.librem.one/tags/centralization" rel="tag">#centralization</a> inherent to the <a href="https://social.librem.one/tags/privacy" rel="tag">#privacy</a> improvements of hiding the domain name. You can find more details in our project announcement: <a href="https://guardianproject.info/2023/11/09/defo-developing-ech-for-openssl-round-two/" rel="nofollow noreferrer">https://guardianproject.info/2023/11/09/defo-developing-ech-for-openssl-round-two/</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2340816#notice-4620398">In conversation</a><time datetime="2023-11-17T19:26:39+09:00" title="Friday, 17-Nov-2023 19:26:39 JST">Friday, 17-Nov-2023 19:26:39 JST</time> <span>from <span><a href="https://social.librem.one/@guardianproject/111424889274209375" rel="external" title="Sent from social.librem.one via ActivityPub">social.librem.one</a></span></span><a href="https://social.librem.one/@guardianproject/111424889274209375">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: defo.ie</div><h5><a href="https://defo.ie/">Developing ECH for OpenSSL (DEfO) - welcome to defo.ie</a></h5><div></div></header><div></div><footer></footer></article></li><li><article><header><div>Domain not in remote thumbnail source whitelist: guardianproject.info</div><h5><a href="https://guardianproject.info/2023/11/09/defo-developing-ech-for-openssl-round-two/">DEfO - Developing ECH for OpenSSL (round two)</a></h5><div></div></header><div>Encrypted ClientHello (ECH) plugs a privacy-hole in TLS, hiding previously visible details from network observers. The most important being the name of the web-site the client wishes to visit (the Server Name Indication or SNI). This can be a major privacy leak, like when accessing a dissident news source hosted on a Content Delivery Network (CDN). A visible domain name also provides a straightforward method for censors to block websites and internet services.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Guardian Project (guardianproject@social.librem.one)'s status on Friday, 17-Nov-2023 19:26:39 JST Guardian Project
We have started the second round of our partnership https://defo.ie to ensure that the new #TLS standard called #EncryptedClientHello (#ECH) works for public interest use cases. We also are working to reduce the pressure towards #centralization inherent to the #privacy improvements of hiding the domain name. You can find more details in our project announcement: https://guardianproject.info/2023/11/09/defo-developing-ech-for-openssl-round-two/
In conversationFriday, 17-Nov-2023 19:26:39 JST from social.librem.onepermalink
Attachments
1. Domain not in remote thumbnail source whitelist: defo.ie
  Developing ECH for OpenSSL (DEfO) - welcome to defo.ie
2. Domain not in remote thumbnail source whitelist: guardianproject.info
  DEfO - Developing ECH for OpenSSL (round two)
  Encrypted ClientHello (ECH) plugs a privacy-hole in TLS, hiding previously visible details from network observers. The most important being the name of the web-site the client wishes to visit (the Server Name Indication or SNI). This can be a major privacy leak, like when accessing a dissident news source hosted on a Content Delivery Network (CDN). A visible domain name also provides a straightforward method for censors to block websites and internet services.

Public

Embed Notice

HTML Code

Corresponding Notice