On 10/20/18 12:00 AM, Troiano Alessio wrote: > Also if client will use ESNI, the server should response with a certificate that will be in clear Starting with TLS v1.3, the server certificate is encrypted. Alex.