Fwd: Encrypted SNI

Maxim Dounin mdounin at mdounin.ru
Thu Oct 4 13:44:59 UTC 2018


Hello!

On Wed, Oct 03, 2018 at 10:32:54PM -0400, George wrote:

> Nginx supports BoringSSL too and it already has ESNI support apparently
> https://www.theregister.co.uk/2018/07/17/encrypted_server_names/

Yes, I've seen this article too.  But I don't see any traces of 
ESNI support neither in BoringSSL sources, nor at 
boringssl-review.googlesource.com.

As far as I understand, "Support for ESNI can be found in 
BoringSSL" in this article means that some ESNI patches for 
BoringSSL might exist somewhere, not yet committed, and probably 
not yet public.

-- 
Maxim Dounin
http://mdounin.ru/


More information about the nginx mailing list