On: Encrypted Client Hello

[jmprspret]

> Why? Sane networks shouldn't block anything.

Huh? What? Ever had to administer a corporate network for non-tech staff? Malware is everywhere. People are stupid. AND my assumption on a corporate network has always been that you have no expectation of privacy - its a work network, don't use it for personal stuff! Pretty simple.

[Aaargh20318 → jmprspret]

> my assumption on a corporate network has always been that you have no expectation of privacy

That certainly isn’t true in the EU. You cannot spy on employees computers without a cause.

[josephcsible → jmprspret]

If it's really a corporate network, then the company will own the endpoints and can do the inspection there.

[3np → josephcsible]

Not meaningfully so with ECH, the whole point of this subthread.

[josephcsible → 3np]

ECH only makes network-level monitoring harder. Monitoring on the endpoint is still just as easy.

[capitainenemo → 3np]

Corporate networks often use MITM master certs that employee browsers must accept.