Jan Schaumann on Nostr: Looks like Russia is now blocking Cloudflare's Encrypted Client Hello traffic if: - ...

Looks like Russia is now blocking Cloudflare's Encrypted Client Hello traffic if:
- SNI is cloudflare-ech.com
- TLS ClientHelloOuter contains the "encrypted_client_hello" extension

https://github.com/net4people/bbs/issues/417

Russia officially recommends "owners of information resources disable the TLS ECH extension or, more correctly, use domestic CDN services".

https://cmu.gov.ru/ru/news/2024/11/07/рекомендуем-отказаться-от-cdn-сервиса-cloudflare/

With increased ECH use, I expect certain other actors to follow suit.

#tls #ech