TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Disabling Encrypted ClientHello in Google Chrome, and Why

4 pointsby new23dover 1 year ago

3 comments

new23dover 1 year ago
Google Chrome v117 turned on TLS Encrypted ClientHello by default (on 27 Sep?) This will impact the effectiveness and accuracy of outbound traffic filtering* - for those who&#x27;ve implemented it (regardless of vendor.) We&#x27;ve written a short blog post on disabling it with PowerShell, Windows Registry and Google Chrome UI for those who may need to roll this out ASAP and regain visibility. (Disclosure: we are a vendor of an outbound filtering solution and this has impacted our customers already.)<p>*for many websites, the domain name visibility during an HTTPS handshake will no longer be available to firewalls&#x2F;proxies (unless they were terminating.)
评论 #37823367 未加载
evanjrowleyover 1 year ago
DiscrimiNAT Firewall seems like a useful product: <a href="https:&#x2F;&#x2F;chasersystems.com&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;chasersystems.com&#x2F;</a><p>Reminds me somewhat of Zscaler.
josephcsibleover 1 year ago
The fact that it&#x27;s possible for a middlebox to detect ECH at all is a flaw in the protocol, IMO.