Encrypt it or lose it: how encrypted SNI works

Cloudflare has announced support for encrypted SNI (Server Name Indication), an extension to the TLS 1.3 protocol that improves internet user privacy by preventing on-path observers, such as ISPs and firewalls, from intercepting the TLS Server Name Indication (SNI) extension and using it to determine which websites users are visiting. Encrypted SNI, together with other internet security features already offered by Cloudflare for free, will make it harder to censor content and track users on the internet. The encrypted SNI feature is now enabled for all Cloudflare zones using their name servers.