search

ietf-wg-ohai / draft-ohai-svcb-config

Other
0 stars 4 forks source link

A client has to trust the oblivious proxy resource #13

Closed martinthomson closed 2 years ago

martinthomson commented 2 years ago

If it gets this via a discovery process, how does it know that it can trust that resource?

tfpauly commented 2 years ago

In this model, the client isn't discovering the proxy — it's discovering the target, and has a proxy that it trusts already. Proxy discovery would be a separate mechanism.

martinthomson commented 2 years ago

I see. That wasn't at all clear. OHTTP doesn't really let you choose a target at the proxy though, so how would you propose that the client discover the oblivious proxy resource?

tfpauly commented 2 years ago

The client would be using a proxy it already knows about or knows can handle this target.

tfpauly commented 2 years ago

Text has since clarified that this doesn't cover discovery of the proxy / relay. We can have further discussion if people think it's needed (beyond having client-selected/trusted relays).