tlswg / draft-ietf-tls-esni

TLS Encrypted Client Hello
https://tlswg.github.io/draft-ietf-tls-esni/#go.draft-ietf-tls-esni.html
Other
229 stars 56 forks source link

Extraneous configurations MUST have invalid DNS names? #630

Open ekr opened 1 day ago

ekr commented 1 day ago

Suggested in AD review.

ekr commented 1 day ago

Also, should we provide guidance on how to select these names. Paul writes:

Should it use known-invalid DNS names, eg "invalid:com", or some randomized long valid but unlikely DNS name? Guidaance would be useful.