Encrypted client hello doesn't help with privacy (opens in new tab)

## It does sound like a contradiction, doesn't it? 2026-04-08 --- Much of the traffic on the web is now encrypted thanks to SSL/TLS \(https\)\. This prevents attackers from seeing the contents of your traffic\. But they can still see which domains you are connecting to, and that might be a problem still\. DNS-over-TLS \(RFC7858\) aimed to solve this, encrypting the domain names you’re requesting\. Sadly, the SNI extension of client hello still leaks the domain name 1\. Obviously, we ha...