Client Hello should be encrypted in HTTP/3 and QUIC, but in Wireshark I can still see SNI of the QUIC connection when using DoH.

The names should be encrypted inside the Handshake/CRYPTO packets.

enter image description here enter image description here

is this expected? is ECH the only way that SNI and information about the website being visited, will be encrypted?



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy