ech-research

ECH Analysis Tools

This project contains tools to better understand the impact of deploying the HTTPS Resource Record (RR) and Encrypted ClientHello (ECH) in order to inform various tradeoffs.

[!NOTE] This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program.

[!CAUTION] This project is intended for demonstration purposes only. It is not intended for use in a production environment.

Some research questions:

• DNS Latency - How long does it take to receive the HTTPS RR, and how does that compare to the A and AAAA records?
• Service Support - Do services implement the TLS standard correctly, or do they fail with the ECH GREASE extension? Do the services supporting ECH correctly implement it? What HTTPS RR features do services support?
• Network Support - Do networks block or interfere with ECH?

This project contains two main tools to help answer these questions:

1. dnsreport: A Go program to perform large-scale DNS analysis.
2. greasereport: A Go program to test ECH GREASE compatibility with top websites.

See the README.md file in each tool's directory for more information.