[Hotrfc] HotRFC: ECH Deployment Considerations

[Andrew Campling <[e-mail]>]

Hi
I've attched slides for our slot at the HotRFC session tomorrow and have also tidied up the abstract a little as I did th eoriginal on an overnight flight to hit the deadline whilst trying not to annoy my neighbours.

Andrew



Talk title: ECH Deployment Considerations

Presenter, Affiliation, and whether you'll be presenting in person or remotely
Andrew Campling, 419 Consulting and Arnaud Taddei, Broadcom, both in-person

Short topic abstract (topics should be IETF- or IRTF-related in some way)

We are working on a document that is intended to inform the community about the impact of the deployment of the proposed Encrypted Client Hello (ECH) standard that encrypts Server Name Indication (SNI) and other data.  Data encapsulated by ECH (ie data included in the encrypted ClientHelloInner) is of legitimate interest to on-path security actors including those providing inline malware detection, parental controls, content filtering to prevent access to malware and other risky traffic, mandatory security controls etc.



The current draft of the document already includes observations on current use cases for SNI data in a variety of contexts.  It highlights how the use of that data is important to the operators of both public and private networks and shows how the loss of access to SNI data will cause difficulties in the provision of a range of services to end-users, including the potential weakening of cybersecurity defences.  Some mitigations are identified that may be useful for inclusion by those considering the adoption of support for ECH in their software.

What you're looking for (education, collaborators, implementers, etc.)
We are looking for the involvement of additional collaborators to augment the contributions that we have already and are continuing to gather, especially from the end-user and opsec communities.

Coordinates to learn more, contact those involved, participate in existing mailing lists and scheduled meetings, and/or relevant formal or side meetings.
Andrew Campling and Arnaud Taddei will be on site in San Francisco all week and can also be reached via [e-mail]<mailto:[e-mail]> and [e-mail]<mailto:[e-mail]> respectively.

Any relevant drafts or helpful resources you'd like collaborators to look at
Datatracker -  https://datatracker.ietf.org/doc/draft-campling-ech-deployment-considerations/
GitHub - https://github.com/echdeploy/draft-ech-deployment-considerations