Re: [OPSEC] Operational Security Considerations and Encrypted Client Hello

Hello WG!

I'd encourage the WG to review this document - it's relatively short, and
is an easy read.

ECH is likely to be a fairly active topic in the IETF, and has significant
Opsec implications. The document is on the OpSec agenda, and so having read
it before the meeting will be really helpful..

W

On Fri, Feb 17, 2023 at 8:15 AM, Andrew Campling <
andrew.campling@419.consulting> wrote:

> Hi Opsec wg
>
> You may be aware that some of us have been looking at the potential impact
> of the deployment of Encrypted Client Hello (ECH), an extension to
> TLS1.3+.  We are continuing to develop the draft, which is accessible at
> https://datatracker.ietf.org/doc/
> draft-campling-ech-deployment-considerations/.  You will note that many
> of the issues that we have identified relate to various aspects of
> operational security in a variety of contexts.
>
>
>
> We have been encouraged to share the draft with the Opsec working group to
> see if there is interest in the topic within the group, hence this post.  I
> and at least one of my co-authors will be present in Yokohama for the IETF
> 116 meeting and will be happy to present the highlights of the draft if
> time is available on the wg agenda.
>
>
>
>
>
> Andrew
>
>
>
> _______________________________________________
> OPSEC mailing list
> OPSEC@ietf.org
> https://www.ietf.org/mailman/listinfo/opsec
>