{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T21:22:29Z","timestamp":1782940949886,"version":"3.54.5"},"publisher-location":"Cham","reference-count":22,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783031254598","type":"print"},{"value":"9783031254604","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2023,2,18]],"date-time":"2023-02-18T00:00:00Z","timestamp":1676678400000},"content-version":"vor","delay-in-days":48,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>The Transport Layer Security (TLS) protocol was introduced to solve the lack of security and privacy in the early versions of the world wide web. However, even though it has substantially evolved over the years, certain features still present privacy issues. One such feature is the Server Name Indication (SNI) extension, which allows multiple web servers to reside behind a provider hosting multiple domains with the same IP address; at the same time it allows third parties to discover the domains that end users visit. In the last few years, the Encrypted Server Name Indication (ESNI) Internet draft is being developed by the Internet Engineering Task Force (IETF); this encrypted variant of the extension was renamed to Encrypted Client Hello (ECH) in latest versions. In this paper, we measure the adoption of both these versions, given that they have substantial differences. By analyzing the top 1M domains in terms of popularity, we identify that only a small portion, less than 19%, supports the privacy-preserving ESNI extension and practically no domain supports ECH. Overall, these results demonstrate that there is still a long way to go to ensure the privacy of end users visiting TLS-protected domains which are co-located behind a common Internet-facing server.<\/jats:p>","DOI":"10.1007\/978-3-031-25460-4_10","type":"book-chapter","created":{"date-parts":[[2023,2,17]],"date-time":"2023-02-17T09:12:22Z","timestamp":1676625142000},"page":"177-190","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Measuring the Adoption of TLS Encrypted Client Hello Extension and Its Forebear in the Wild"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9481-0906","authenticated-orcid":false,"given":"Zisis","family":"Tsiatsikas","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0142-7503","authenticated-orcid":false,"given":"Georgios","family":"Karopoulos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6455-502X","authenticated-orcid":false,"given":"Georgios","family":"Kambourakis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,2,18]]},"reference":[{"key":"10_CR1","doi-asserted-by":"crossref","unstructured":"Rescorla, E.: The Transport Layer Security (TLS) Protocol Version 1.3. RFC 8446, August 2018. https:\/\/www.rfc-editor.org\/info\/rfc8446","DOI":"10.17487\/RFC8446"},{"key":"10_CR2","doi-asserted-by":"crossref","unstructured":"Kampourakis, V., Kambourakis, G., Chatzoglou, E., Zaroliagis, C.: Revisiting man-in-the-middle attacks against https. Netw. Secur. 2022(3) (2022)","DOI":"10.12968\/S1353-4858(22)70028-1"},{"key":"10_CR3","unstructured":"3rd D.E.E.: Transport Layer Security (TLS) Extensions: Extension Definitions. RFC 6066, January 2011. https:\/\/www.rfc-editor.org\/info\/rfc6066"},{"key":"10_CR4","doi-asserted-by":"crossref","unstructured":"Hoffman, P.E., McManus, P.: DNS Queries over HTTPS (DoH). RFC 8484, October 2018. https:\/\/www.rfc-editor.org\/info\/rfc8484","DOI":"10.17487\/RFC8484"},{"key":"10_CR5","doi-asserted-by":"crossref","unstructured":"Hu, Z., Zhu, L., Heidemann, J., Mankin, A., Wessels, D., Hoffman, P.E.: Specification for DNS over Transport Layer Security (TLS). RFC 7858, May 2016. https:\/\/www.rfc-editor.org\/info\/rfc7858","DOI":"10.17487\/RFC7858"},{"key":"10_CR6","doi-asserted-by":"crossref","unstructured":"Huitema, C., Dickinson, S., Mankin, A.: DNS over Dedicated QUIC Connections. RFC 9250, May 2022. https:\/\/www.rfc-editor.org\/info\/rfc9250","DOI":"10.17487\/RFC9250"},{"key":"10_CR7","doi-asserted-by":"crossref","unstructured":"Kambourakis, G., Karopoulos, G.: Encrypted DNS: the good, the bad and the moot. Comput. Fraud Secur. 2022(5) (2022)","DOI":"10.12968\/S1361-3723(22)70572-6"},{"key":"10_CR8","unstructured":"Rose, S., Larson, M., Massey, D., Austein, R., Arends, R.: DNS Security Introduction and Requirements. RFC 4033, March 2005. https:\/\/www.rfc-editor.org\/info\/rfc4033"},{"key":"10_CR9","unstructured":"Rescorla, E., Oku, K., Sullivan, N., Wood, C.A.: Encrypted Server Name Indication for TLS 1.3. Internet Engineering Task Force, Internet-Draft draft-ietf-tls-esni-03, work in Progress. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-tls-esni-03"},{"key":"10_CR10","unstructured":"Rescorla, E., Oku, K., Sullivan, N., Wood, C.A.: TLS Encrypted Client Hello. Internet Engineering Task Force, Internet-Draft draft-ietf-tls-esni-14, February 2022, work in Progress. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-tls-esni-14"},{"key":"10_CR11","unstructured":"ZDNet: China is now blocking all encrypted HTTPS traffic that uses TLS 1.3 and ESNI. https:\/\/www.zdnet.com\/article\/china-is-now-blocking-all-encrypted-https-traffic-using-tls-1-3-and-esni\/. Accessed 24 Nov 2021"},{"key":"10_CR12","unstructured":"ZDNet: Russia wants to ban the use of secure protocols such as TLS 1.3, DoH, DoT, ESNI. https:\/\/www.zdnet.com\/article\/russia-wants-to-ban-the-use-of-secure-protocols-such-as-tls-1-3-doh-dot-esni\/. Accessed 24 Nov 2021"},{"key":"10_CR13","unstructured":"Open Observatory of Network Interference: Investigating TLS blocking in India. https:\/\/ooni.org\/post\/2020-tls-blocking-india\/. Accessed 8 July 2022"},{"key":"10_CR14","unstructured":"The Centre for Internet & Society: Reliance Jio is using SNI inspection to block websites. https:\/\/cis-india.org\/internet-governance\/blog\/reliance-jio-is-using-sni-inspection-to-block-websites. Accessed 8 July 2022"},{"key":"10_CR15","unstructured":"Open Observatory of Network Interference: DNS over TLS blocked in Iran. https:\/\/ooni.org\/post\/2020-iran-dot\/. Accessed 8 July 2022"},{"key":"10_CR16","unstructured":"Tranco: A research-oriented top sites ranking hardened against manipulation. https:\/\/tranco-list.eu\/. Accessed 06 May 2022"},{"key":"10_CR17","unstructured":"Chai, Z., Ghafari, A., Houmansadr, A.: On the importance of encrypted-SNI (ESNI) to censorship circumvention. In: FOCI @ USENIX Security Symposium (2019)"},{"key":"10_CR18","unstructured":"Hoang, N.P., Polychronakis, M., Gill, P.: Measuring the accessibility of domain name encryption and its impact on internet filtering. CoRR, vol. abs\/2202.00663 (2022). https:\/\/arxiv.org\/abs\/2202.00663"},{"key":"10_CR19","doi-asserted-by":"publisher","unstructured":"Hoang, N.P., Akhavan Niaki, A., Borisov, N., Gill, P., Polychronakis, M.: Assessing the privacy benefits of domain name encryption. In: Proceedings of the 15th ACM ASIACCS 2020, ASIA CCS 2020, pp. 290\u2013304. Association for Computing Machinery, New York, NY, USA (2020). https:\/\/doi.org\/10.1145\/3320269.3384728","DOI":"10.1145\/3320269.3384728"},{"key":"10_CR20","doi-asserted-by":"publisher","unstructured":"Trevisan, M., Soro, F., Mellia, M., Drago, I., Morla, R.: Does domain name encryption increase users\u2019 privacy?. SIGCOMM Comput. Commun. Rev. 50(3), 16\u201322 (2020). https:\/\/doi.org\/10.1145\/3411740.3411743","DOI":"10.1145\/3411740.3411743"},{"key":"10_CR21","unstructured":"Farrell, S.: A well-known URI for publishing ECHConfigList values. Internet Engineering Task Force, Internet-Draft draft-farrell-tls-wkesni-03, May 2022, work in Progress. https:\/\/datatracker.ietf.org\/doc\/html\/draft-farrell-tls-wkesni-03. Accessed 06 June 2022"},{"key":"10_CR22","unstructured":"W3Techs: Usage statistics of Default protocol https for websites. https:\/\/w3techs.com\/technologies\/details\/ce-httpsdefault"}],"updated-by":[{"DOI":"10.1007\/978-3-031-25460-4_40","type":"correction","label":"Correction","source":"publisher","updated":{"date-parts":[[2023,12,29]],"date-time":"2023-12-29T00:00:00Z","timestamp":1703808000000}}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2022 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-25460-4_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,5]],"date-time":"2024-02-05T18:10:45Z","timestamp":1707156645000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-25460-4_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031254598","9783031254604"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-25460-4_10","relation":{"correction":[{"id-type":"doi","id":"10.1007\/978-3-031-25460-4_40","asserted-by":"object"}]},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"18 February 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"29 December 2023","order":2,"name":"change_date","label":"Change Date","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"Correction","order":3,"name":"change_type","label":"Change Type","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"A correction has been published.","order":4,"name":"change_details","label":"Change Details","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Copenhagen","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 September 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2022.compute.dtu.dk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"80","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"38","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"48% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1.7","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}