Brave-browser: feature: support encrypted SNI

[diracdeltas]

per slack discussion from a while ago, we should support encrypted SNI on all platforms: https://blog.mozilla.org/security/2018/10/18/encrypted-sni-comes-to-firefox-nightly/

[DavidRBailey]

Encrypted SNI is getting attention. https://medium.com/asecuritysite-when-bob-met-alice/your-coffee-shop-wi-fi-can-see-what-you-are-connecting-to-8c2a441be6ae

[HLFH]

Related to https://github.com/brave/browser-laptop/issues/12235
Please follow: https://bugs.chromium.org/p/chromium/issues/detail?id=908132
And the IETF TLS working group Internet Draft for ESNI: https://github.com/tlswg/draft-ietf-tls-esni

[ghost]

https://www.cloudflare.com/ssl/encrypted-sni/ seems to emphasize having support for this alongside DNS over HTTPS (#1864)

[jadchaar]

Chromium 78 shipped this week with an optional flag to enable DNS over HTTPS, so I think it would be great to get encrypted SNI soon as well.

[riastradh-brave]

We are totally on board with adopting encrypted SNI as soon as we can.

According to https://bugs.chromium.org/p/chromium/issues/detail?id=908132, the state of ESNI in Chromium seems to be that Google is waiting for the IETF TLS working group to finish the draft https://datatracker.ietf.org/doc/draft-ietf-tls-esni/ before they implement it. (The last update to the draft was yesterday, so it evidently hasn't settled yet.)

Since it is likely to involve some intimate surgery in the TLS stack in BoringSSL, we probably won't do this ourselves if Google is likely to do it soon anyway. Probably the best way to get things going is to let the IETF TLS WG finish the specification as soon as possible.

[uwe22]

What is the status of privacy regarding ESNI?
Does the Brave Browser support encrypted SNI now?
For people living in countries filtering content by SNI this is crucial.

[csoko]

What is the status of privacy regarding ESNI?
Does the Brave Browser support encrypted SNI now?
For people living in countries filtering content by SNI this is crucial.

Use firefox for the time being....

[AnkS4]

Is there any progress on ESNI?

[xenstar]

Yeah me too, also want to know. Is there any progress? Brave is great, but still using firefox because I can get full ESNI support.

[FatBirdie]

Yeah, status update pllzzzz

[MrClayPole]

Any update on this feature?

[FatBirdie]

I would also like to know if there are any updates for this

[xenstar]

So many people are waiting for this, hopefully brave will add it soon

[MihaiVoinea]

Any updates on this?

[Genkilabs]

+1

[evangallo]

+1, it seems like the specification is taking forever - would be great to see support for this sooner rather than later.

[trojek]

+1

[uwe22]

+1

[keerah]

this is the only feature that holds me off using Brave as my everyday browser

[vivektaparia]

This is needed in Brave, hope this get to Brave soon.

[FireMasterK]

Is this gonna be fixed by Brave or Chromium? This literally breaks censorship in many countries and at the same time, hides what you're doing from your ISP.

[bsclifton]

@FireMasterK this would be fixed upstream in Chromium

It appears some good work has been done on the Chromium side since then. The issues tracking this work are:

• https://bugs.chromium.org/p/chromium/issues/detail?id=1091403
• https://bugs.chromium.org/p/boringssl/issues/detail?id=275

You can login with a Google account and star those and you'll get email notifications on update

[pikilon]

ANy progress on how to enable this?

[ShrirajHegde]

So this isn't coming to Linux until chromium gets it? says disabled on the platform (literally all other platforms supported by chromium are supported)

[Snorkeldink]

+1

[kaiyang-optimize]

+1