DEfO ECH Apps

This is a demo fork of F-Droid to serve as an example app built on the

development fork of Conscrypt which supports TLS Encrypted ClientHello

(ECH). ECH is the next version of the TLS protocol that encrypts

internet traffic and puts the "S" in HTTPS. It makes it possible to

encrypt all of the metadata that is possible to encrypt in the TLS

negogiation. It is a test case for interoperability between various

implementations, platforms, and networks.

The Encrypted ClientHello (ECH) mechanism (IETF draft spec) is a way to

plug a few privacy-holes that remain in the Transport Layer Security

(TLS) protocol that's used as the security layer for the web. OpenSSL

is a widely used library that provides an implementation of the TLS

protocol. The DEfO project is developing an implementation of ECH for

OpenSSL, and various clients and servers that use OpenSSL as a

demonstration and for interoperability testing.

This uses the mirror of f-droid.org that is on Cloudflare with ECH

enabled: https://cloudflare.f-droid.org

DEfO was initially funded by the Open Technology Fund, and

subsequently by the National Democratic Initiative. Tolerant Networks

Ltd. and people from the Guardian Project are doing the work in DEfO.