[feature] ESNI (Encrypted Server Name Indication)

[drwetter]

... see https://datatracker.ietf.org/doc/draft-ietf-tls-esni/?include_text=1

(1. Introduction DISCLAIMER: This is very early a work-in-progress design)

I haven't read it really and I can't tell whether it would be possible, one way or another. Just filing the issue so that i won't be forgotten

[Seirdy]

This feature is now called Encrypted Client Hello. I don't think it is available in OpenSSL but it should be available in BoringSSL. Cloudflare uses BoringSSL to enable ECH on their sites.

[thomasleplus]

I am considering implementing Encrypted Client Hello (ECH) for a project and it would be great if testssl.sh could include it in its report since that's what I already use to test other TLS requirements.

[drwetter]

heard that, like it, but it's not a top prio on my agenda. If somebody wants to help: great!