Re: [Hotrfc] HotRFC: ECH Deployment Considerations

Hi Andrew,

Thank you! I’m updating your abstract now and uploading the slides. 

See you tonight!

Liz Flynn
Project Manager / IETF
lflynn@amsl.com

> On Jul 22, 2023, at 1:59 PM, Andrew Campling <andrew.campling@419.consulting> wrote:
> 
> Hi
> I’ve attched slides for our slot at the HotRFC session tomorrow and have also tidied up the abstract a little as I did th eoriginal on an overnight flight to hit the deadline whilst trying not to annoy my neighbours.  
>  
> Andrew
>  
>  
>  
> Talk title: ECH Deployment Considerations
>  
> Presenter, Affiliation, and whether you'll be presenting in person or remotely
> Andrew Campling, 419 Consulting and Arnaud Taddei, Broadcom, both in-person 
>  
> Short topic abstract (topics should be IETF- or IRTF-related in some way)
> We are working on a document that is intended to inform the community about the impact of the deployment of the proposed Encrypted Client Hello (ECH) standard that encrypts Server Name Indication (SNI) and other data.  Data encapsulated by ECH (ie data included in the encrypted ClientHelloInner) is of legitimate interest to on-path security actors including those providing inline malware detection, parental controls, content filtering to prevent access to malware and other risky traffic, mandatory security controls etc.
>  
> The current draft of the document already includes observations on current use cases for SNI data in a variety of contexts.  It highlights how the use of that data is important to the operators of both public and private networks and shows how the loss of access to SNI data will cause difficulties in the provision of a range of services to end-users, including the potential weakening of cybersecurity defences.  Some mitigations are identified that may be useful for inclusion by those considering the adoption of support for ECH in their software.
>  
> What you're looking for (education, collaborators, implementers, etc.)
> We are looking for the involvement of additional collaborators to augment the contributions that we have already and are continuing to gather, especially from the end-user and opsec communities.
>  
> Coordinates to learn more, contact those involved, participate in existing mailing lists and scheduled meetings, and/or relevant formal or side meetings.
> Andrew Campling and Arnaud Taddei will be on site in San Francisco all week and can also be reached viaAndrew.Campling@419.Consulting <mailto:Andrew.Campling@419.Consulting> and Arnaud.Taddei@Broadcom.Com <mailto:Arnaud.Taddei@Broadcom.Com> respectively.
> 
> Any relevant drafts or helpful resources you'd like collaborators to look at
> Datatracker -  https://datatracker.ietf.org/doc/draft-campling-ech-deployment-considerations/ <https://datatracker.ietf.org/doc/draft-campling-ech-deployment-considerations/>
> GitHub - https://github.com/echdeploy/draft-ech-deployment-considerations <https://github.com/echdeploy/draft-ech-deployment-considerations>
>  
>  
> <Encrypted Client Hello Deployment Considerations Hot RFC, 23-07-23.pdf>-- 
> Hotrfc mailing list
> Hotrfc@ietf.org <mailto:Hotrfc@ietf.org>
> https://www.ietf.org/mailman/listinfo/hotrfc <https://www.ietf.org/mailman/listinfo/hotrfc>