Matt Holt

I'll probably hoist the config to a global level, since I imagine most users will want to specify just one outer SNI for the whole server, and have all defined sites encapsulated within it.

13.02.2025 04:42 — 👍 1    🔁 0    💬 0    📌 0

config likely to change

Browser loaded domain using inner SNI

Wireshark shows outer SNI only

Hello.

Today, @caddy.bsky.social completed its first ECH handshake.

It completely automated the "HTTPS"-type DNS record and TLS certificates for both inner and outer SNI.

13.02.2025 04:42 — 👍 8    🔁 1    💬 1    📌 0