Re: TLS ESNI and HelloRetryRequest in Firefox 64, Firefox Nightly

2019-01-05 Thread Alexander Venedioukhin (lists)
On Fri, Jan 4, 2019 at 7:47 PM wrote: > Is this already implemented? Yes, it works in current Firefox 64 and Nightly, but you have to manually activate ESNI and DNS-over-HTTPS in about:config. > [1] is not yet fixed and [2] does not work for me with current Nightly. > > [1]

TLS ESNI and HelloRetryRequest in Firefox 64, Firefox Nightly

2019-01-03 Thread Alexander Venedioukhin (lists)
Hello, I'm implementing ESNI (encrypted SNI, current draft 02) server-side. It works with Firefox 64.0 and Nightly 66.0a1 as expected, until the server sends HelloRetryRequest during handshake. In latter case Firefox responds with plain text SNI extension (same hostname) in second ClientHello,