search

tlswg / draft-ietf-tls-esni

TLS Encrypted Client Hello
https://tlswg.github.io/draft-ietf-tls-esni/#go.draft-ietf-tls-esni.html
Other
230 stars 56 forks source link

Clarify attacker capabilities #564

Closed chris-wood closed 9 months ago

chris-wood commented 9 months ago

Closes #513 Closes #544

The intent here is to punt entirely on the mechanism by which messages between client-facing and backend servers are protected in transit, and simply to state the assumption that these messages do not let the attacker trivially learn information that ECH otherwise protects via encryption. Suggestions for further clarifications are welcome!

cc @dennisjackson, @davidben, @cjpatton

dennisjackson commented 9 months ago

LGTM

chris-wood commented 9 months ago

@dennisjackson can I interpret your LGTM as approval? @cjpatton, are you able to take a look at the linked issues?

dennisjackson commented 9 months ago

@dennisjackson can I interpret your LGTM as approval?

Yes. My two cents are that thetext is general enough to cover the various issues and specific enough to be easy to understand.

kazuho commented 9 months ago

@chris-wood Thank you for writing this. The changes look good.