[5] 冲浪小本本儿 (二)(2-2)----http-https-ECH 最广泛、最真实、最管用的互联网隐私保护[3]--- ECH详谈

gc6xm95z10 · 2025 年9 月 29 日 14:27

这系列文章写的非常详细。

最近发现了 ECH 的一个特殊用途，想与大家分享。

1.ECH Fronting
2.强制 ECH 直连所有 CF 网站
3.DoH+ECH

使用xray-core可以实现

github.com/net4people/bbs

ECH Fronting？

opened 02:48PM - 23 Sep 25 UTC

RememberOurPromise

Hello everyone, I recently discovered a unique use for ECH. China is currently …blocking all overseas DOH public services, making ECH difficult to use. My tests have shown that all websites hosted on the CF Free plan have the same ECH value when querying HTTPS records at the same time. So, you can even use your local DNS to query the HTTPS records of another CF website that hasn't been DNS poisoned in plaintext to obtain the ECH public key, and then use it normally. This method is great! It doesn't rely on DOH or overseas DNS services. Will the GFW pollute the HTTPS records of all websites? Xray currently has this feature, but it's for domains with proxy functionality. This method doesn't actually require a proxy server and is very suitable for browser plugins. I'm wondering if any developers would be willing to implement it? Unblocking CF websites with ECH in one click. [Xray文档 https://xtls.github.io/config/transport.html#tlsobject](https://xtls.github.io/config/transport.html#tlsobject) 特别地，可以使用指定的域名用于查询 ECHConfig, 格式为 "example.com+https://1.1.1.1/dns-query" 这样 Xray 会强制使用 example.com 的 DNS 记录中的 ECHConfig 用于连接，如果你想从 DNS 获取 ECHConfig 但又不想暴露自己在查询这个域名的 HTTPS 记录或者在这个域名下发布 HTTPS 记录时有一些用。