SNI
ECH
TLS CLIENTHELLO
RECORD
16 03 01
VERSION
TLS 1.3
CIPHER SUITES
13 01 13 02
SNI
facebook.com
KEY SHARE
a9 f1 44 02
facebook.com
name match → inject TCP RST
Client
browser hello
Server
TLS endpoint
RST
Hostname exposed — connection reset.