tlswg / draft-ietf-tls-esni

TLS Encrypted Client Hello
https://tlswg.github.io/draft-ietf-tls-esni/#go.draft-ietf-tls-esni.html
Other
231 stars 57 forks source link

Allow empty enc in ClientECH. #444

Closed davidben closed 3 years ago

davidben commented 3 years ago

The second ClientHello after HelloRetryRequest reuses the HPKE context and calls Seal/Open a second time. To avoid needing to unnecessarily retain the enc value, and discourage servers from mistakenly recreating the HPKE context, we made it use the empty string but forgot to update the syntax to match.