Let me just stress that the effect of Zstandard on individual end-user latency is a rounding error. No user will ever go: “That was a quick loading web site. Must be Zstandard!”. The effect is solely Cloudflare having to spend x% less bandwidth to deliver the content, saving on their network and server resources.
New standards for a faster and more private Internet
31–40 of 87 posts
Re: New standards for a faster and more private Internet
#32Earlier quoted context omitted.
The idea is to make ECH too large of a target to make blocking it practical. If you block ECH you end up blocking access to a large portion of the internet in that region. It's why some major browsers have chosen to not gracefully fallback to non-ECH handshakes upon connection failure.
I think the other poster was implying that the governments don’t care.
This alongside people smuggling in starlink is making censorship useless.
Re: New standards for a faster and more private Internet
#33> New standards for a faster and more private Internet > Zstandard I get "faster" but how does it make the internet "more private". The word "private" only shows up exactly once on that page, in the title.
I believe that the "more private" part is referencing the "Encrypted Client Hello (ECH)" section in the later part of the post.
> This means that whenever a user visits a website on Cloudflare that has ECH enabled, no one except for the user, Cloudflare, and the website owner will be able to determine which website was visited.
So you must use entity which controls the DNS and this entity makes the request further for actual website. Feels like just worse VPN.
Re: New standards for a faster and more private Internet
#34What will ECH mean for places like China or South Korea? Do governments have access to Cloudflare logs? Only with court orders? ECH seems directly opposed to Chinese governments control of the web.
I think you meant North Korea, not South. It means nothing. Countries always ask nicely first for a domain to be blocked for IPs from their countries. Companies like Cloudflare or Akamai can either honor the request, or find their IP range blocked (yes, including all the other serviced domains). They usually take the first option.
South Korea is infamous for their internet censorship.
https://en.wikipedia.org/wiki/Internet_censorship_in_South_K...
Re: New standards for a faster and more private Internet
#35Re: New standards for a faster and more private Internet
#36ECH makes it hard to block known scam sites at the network layer, for example.
Re: New standards for a faster and more private Internet
#37After examining how scammers and phishers host their sites, I’ve realised that “private” for Cloudflare means protecting the privacy of criminals. ECH makes it hard to block known scam sites at the network layer, for example.
Re: New standards for a faster and more private Internet
#38This isn't privacy. This is centralized snooping.
It's like Google's approach to third party cookies. Nobody other than Google can have tracking information.
Re: New standards for a faster and more private Internet
#39Earlier quoted context omitted.
I think the other poster was implying that the governments don’t care.
Disagree on this take. Blocking services does have an economic impact. This alongside people smuggling in starlink is making censorship useless.
And starlink can be traced. It’s only time before some people start getting arrested.
Re: New standards for a faster and more private Internet
#40Earlier quoted context omitted.
Disagree on this take. Blocking services does have an economic impact. This alongside people smuggling in starlink is making censorship useless.
China blocks services all the time. I was one of the original 10 blocked by the great firewall of china. And starlink can be traced. It’s only time before some people start getting arrested.
Iran does not.