sslscan icon indicating copy to clipboard operation
sslscan copied to clipboard

Feature Request: Detect EncryptedClientHello Support

Open prajaybasu opened this issue 7 months ago • 4 comments

I am not sure if this is quite in the scope of sslscan but it would be nice to be able to verify ECH and ESNI in sslscan.

Verifying full support would require the appropriate DNS records to be present alongside the TLS extensions working as expected.

https://www.cloudflare.com/learning/ssl/what-is-encrypted-sni/ https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml https://github.com/openssl/openssl/tree/feature/ech

prajaybasu avatar May 20 '25 22:05 prajaybasu