12 Days of Defense - Day 8: How Encrypted SNI works (and How It Will Blind Your Security Team)

Important 2021 Update - ESNI has been removed from Firefox in version 85.0+ in favor of the ECH standard instead. See my new video for a follow up -    • How the Encrypted Client Hello TLS Extensi...   ------------------------------ Is ESNI going to ruin your day? Check out this video to see how it works and find out why it may be the final blow that forces your organization to adopt TLS interception and decryption. For additional context on this video, be sure to watch Day 7 on TLS1.3 and Day 6 on DoH. Visit encryptedsni.com to test your browser for ESNI compatibility. === My SANS Courses: SEC450 - Blue Team Fundamentals: https://sans.org/sec450 MGT551 - Building and Leading Security Operations Centers: https://sans.org/mgt551 PDF Guide to Security Operations: https://www.sans.org/security-resourc... Blueprint Podcast: https://sans.org/blueprint-podcast Twitter:   / sechubb