Enable ECH

[Plum68]

Plum68 last edited by

I went into opera://flags and enabled encrypted clienthello, but cloudflare still says it's off.

[leocg]

leocg Moderator Volunteer @Plum68 last edited by

@plum68 What are you trying to do?

[Plum68]

Plum68 @leocg last edited by

@leocg get a secure SNI connection with cloudflare. It works with chrome, but not opera gx.

[leocg]

leocg Moderator Volunteer @Plum68 last edited by

@plum68 I don't see that flag here.

[leocg]

leocg Moderator Volunteer @Plum68 last edited by

@plum68 Here only Chrome and Edge passed the SNI test. Opera, Vivaldi and Firefox failed.

[Plum68]

Plum68 @leocg last edited by Plum68

@leocg This is the flag. Its the same one you need to enable in chrome to have it pass. For some reason, opera still doesn't, unless you have to enable it somewhere else too. For Firefox, you have to enable a few things.

[leocg]

leocg Moderator Volunteer @Plum68 last edited by

@plum68 I don't see it in Chrome Canary 125 and Chrome Developer 125. Maybe it was removed already.

I also don't see the flag in Opera 109.

[Plum68]

Plum68 @leocg last edited by Plum68

@leocg

LVL5 (core: 107.0.5045.79)

my opera gx version. is 109 beta?
EDIT: it seems to be gone in chrome too...
https://chromestatus.com/feature/6196703843581952

[leocg]

leocg Moderator Volunteer @Plum68 last edited by

@plum68 109 is the current stable version of regular Opera.

Here, Opera GX LVL5 (core: 107.0.5045.79) pass the SNI test. Opera Developer 110 also passed the test.

[megustatop]

megustatop last edited by

I was looking for how to enable "Secure SNI" in Opera because, as mentioned in this thread, it appeared in the Cloudflare test that it was not enabled, but after looking for ways to activate it by entering the flag configuration page and looking for relevant configurations to SNI, ECH and TLS from Flags configurations and options, by magic the "Secure SNI" was activated and Cloudflare tells me so, I don't remember having changed absolutely anything in the configuration because I only looked for options and none that I remember changed. .

But I'm afraid that it will be a non-permanent configuration and will be intermittent, that at any time it will be deactivated again or with the next update it will be deactivated.