Update draft-ietf-tls-esni.md

draft-ietf-tls-esni.md

@@ -1205,7 +1205,7 @@ intercept and decrypt client TLS connections. The feasibility of alternative
 solutions is specific to individual deployments.
 
 In environments where the network operator does not control the endpoint
-devices, or does controls the endpoint devices, but is concerned about the
+devices, or does controls the endpoint devices but is concerned about the
 security consequences of compromised devices, e.g., data exfiltration, the
 SNI field is unsuitable for use as a control even in the absence of ECH. This
 is because devices without controls, or which have been compromised, can alter