When SNI Goes Dark: How Encrypted Client Hello Changes Network Security
RFC 9849 finalizes Encrypted Client Hello, encrypting the one field most enterprise firewalls used to inspect encrypted traffic. What breaks, what still works, and how to rebuild detection without reviving blanket TLS interception.