1690948 - Firefox 85 - Encrypted SNI not working.

Status: RESOLVED DUPLICATE of bug 1667801

(Core :: Networking, defect)

Description

[Hà Duy Phương]

Attachment: screenshot_bug_firefox.rar

I am using Firefox version 85 for windows and macOS computers. Error I got with SNI encryption option (https://www.cloudflare.com/ssl/encrypted-sni/), I enabled the option "network.security.esni.enabled": true and I opened DOH Cloudflare in settings. Everything is working properly in Firefox version 84, with the latest version being 85 the problem occurred.

Comment 1

[:Gijs (he/him)]

Can you attach the screenshot as a normal image file rather than a rar file? Also can you add more details about what is "broken" ?

Comment 2

[:Gijs (he/him)]

(In reply to :Gijs (he/him) from comment #1)

Can you attach the screenshot as a normal image file rather than a rar file? Also can you add more details about what is "broken" ?

Comment 3

[Benjamin Beurdouche [:beurdouche]]

Isn't that expected? https://blog.mozilla.org/security/2021/01/07/encrypted-client-hello-the-future-of-esni-in-firefox/

Comment 4

[Daniel Veditz [:dveditz]]

This was an intentional change and doesn't need to be hidden: see bug 1667743 and bug 1652677 (and the blog post Benjamin linked to above). Both ESNI and it's successor ECH are experimental technologies that are evolving and yet require compatibility between servers and clients on which version of the spec is supported. That means sites will break from time to time. Cloudflare has plans to support ECH but apparently hasn't rolled them out yet.