Skip to main content

Search

Items tagged with: ech


Regarding native HTTPS DNS records for #ECH: Firefox recently added support for those in their code. Maybe that code helps you implement support in curl. In short: on Unix it uses `res_nquery` (glibc) or `res_query` (musl, macos), on Windows `DnsQuery_A` and on Android `android_res_nquery` (available since Android 10).
The relevant code can be found here: https://searchfox.org/mozilla-central/search?q=ResolveHTTPSRecord&path=&case=false®exp=false
#ech


#TLS #EncryptedClientHello #ECH support has been merged in #curl!

https://github.com/curl/curl/pull/11922


We just created a #HOWTO for how to set up dev/test servers using our #TLS #EncryptedClientHello #ECH enabled forks of #OpenSSL #nginx and #curl running on #Debian. It should be very quick to get started using a new domain: https://guardianproject.info/2023/11/10/quick-set-up-guide-for-encrypted-client-hello-ech/


If you've seen in the PR for #ECH in #curl and been curious what it is? https://github.com/curl/curl/pull/11922

The browsers go all-in on it. Now #Firefox:
https://blog.mozilla.org/en/products/firefox/encrypted-hello/