Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

DoH and DNSSEC don't use ECH (encrypted client hello)

From what I remember, only DoT uses ECH

https://media.ccc.de/v/chaoscolloquium-1-dns-privacy-securit...



ECH can be used regardless of DoT, DoH, dnscrypt, or plain as long as your resolver passes HTTPS queries.

You can easily test this: dig @8.8.8.8 https pq.cloudflareresearch.com




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: