On: Encrypted Client Hello

[josephcsible]

If it's really a corporate network, then the company will own the endpoints and can do the inspection there.

[3np → josephcsible]

Not meaningfully so with ECH, the whole point of this subthread.

[josephcsible → 3np]

ECH only makes network-level monitoring harder. Monitoring on the endpoint is still just as easy.

[capitainenemo → 3np]

Corporate networks often use MITM master certs that employee browsers must accept.