...
> A further concern is Cloudflare’s implementation of Encrypted Client Hello (ECH). ECH is a privacy-enhancing TLS extension that encrypts the Server Name Indication, meaning that intermediaries may see that a user is connecting to Cloudflare but not which Cloudflare-hosted website is being accessed. IFPI’s technical analysis found that, in Cloudflare’s implementation, the visible SNI may show a public-facing Cloudflare hostname rather than the actual target website. Cloudflare now enables ECH by default on Free zones, increasing its relevance to copyright enforcement.
Horrifying thoughts.