Support of DoH (DNS over https)
I notice that ProtonMail supports TLS 1.3. When will it support the other issues required for DNS over https - ie DNSSec and Encrypted SNI please?
As it stands a 'man in the middle' while s/he may not be able to read your emails, they can tell that one is using protonmail.com. (This of course assumes that the certificate authority system has not been compromised, which is a big 'if') In my view all websites should support DoH - otherwise the idea of secure browsing is only 'half baked' at best.
6
votes
Richard
shared this idea