IETF Logo Mail Archive

[TLS] Re: checking a bit of ECH behaviour

Martin Thomson <mt@lowentropy.net> Tue, 25 March 2025 00:13 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 361FE11D2555 for <tls@mail2.ietf.org>; Mon, 24 Mar 2025 17:13:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.798
X-Spam-Level:
X-Spam-Status: No, score=-2.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b="fvegeAk/"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="NSqmO/6B"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z7OdfstTjmyD for <tls@mail2.ietf.org>; Mon, 24 Mar 2025 17:12:56 -0700 (PDT)
Received: from fout-a1-smtp.messagingengine.com (fout-a1-smtp.messagingengine.com [103.168.172.144]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 8AC4111D2549 for <tls@ietf.org>; Mon, 24 Mar 2025 17:12:56 -0700 (PDT)
Received: from phl-compute-07.internal (phl-compute-07.phl.internal [10.202.2.47]) by mailfout.phl.internal (Postfix) with ESMTP id 7776A1384906; Mon, 24 Mar 2025 20:12:56 -0400 (EDT)
Received: from phl-imap-01 ([10.202.2.91]) by phl-compute-07.internal (MEProxy); Mon, 24 Mar 2025 20:12:56 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=cc:cc:content-transfer-encoding:content-type:content-type :date:date:from:from:in-reply-to:in-reply-to:message-id :mime-version:references:reply-to:subject:subject:to:to; s=fm3; t=1742861576; x=1742947976; bh=G2w4Ioxfld67lhPt/kLT7tnLYm6cFqhv u0WPR9y4CZQ=; b=fvegeAk/OjG+hR/dNwcD0MNpkq1XQPoXDTV26HJbt3xri4Fp 6Esooto3Koi/atMuzNSL2aGlJ3PqraYWsaVq+MJdlNqVp2RLlNe0W8kOPVsXliIK uWCpUGwLoiyzbUz91gLBjlME4paGuGD11vM01gEM72u4THpBW4xmBqopqjL5/jLe mWjD5R7XtYABg68qrmRB0JE+Ep1NJ+jziqQjLiWWHMlCWrB08JuZDkBkPmqlbdRC 0QnbpQ+d5b1EqD11DfZe2BQpDje9VJmG1doyxF6z9wdqWkMFwE91ahewEp96CA3f 28//0dYQVYj5ls0A6TpDTwlMVgBbzaxdWyok7w==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1742861576; x= 1742947976; bh=G2w4Ioxfld67lhPt/kLT7tnLYm6cFqhvu0WPR9y4CZQ=; b=N SqmO/6BI+EU2difgAmXtRwLbsc5X5R0yc9rjYfMv7FqRx724UDDgAOKgmU6wiIRA NE0XmN696ULrq9kWjEbbqsqqJvzGAH39bfRV/Zcb4PzzmOzwB8LOoP4C7PDOjz1C Gp7LVdhMMUPy0WdhEKCnbCJ8/vmUbJKI7ZjWlhimLTFgFxuDMW6rL3p4sYJQiGjm tMa5tQ5iCM1E8C9r25W/f5Nw+HloZ65hU0z5BV97ryY05HEdih5icZ9A8fXvV0JD zbw2ytzpdRkS8ulRgyp20jSawpPFhAV7XRlCnOP0hIEPfIzbE2tZOPOuef/4bDtN yOB86bFuk9kHmdpvhsiuA==
X-ME-Sender: <xms:B_XhZ54Dh13REQRwhDwS7vcJsqmxERCn_Hhj6nElEIKb7XX8zmVNsA> <xme:B_XhZ26aWsFckF8IZY7akVONA6WJ1vdKVgF7h8brzYOiN8To77W2YSApUyJVjw9mM ZEJOJpxWV4fpkwl7yI>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdduieduudekucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucesvcftvggtihhpih gvnhhtshculddquddttddmnecujfgurhepofggfffhvfevkfgjfhfutgfgsehtjeertder tddtnecuhfhrohhmpedfofgrrhhtihhnucfvhhhomhhsohhnfdcuoehmtheslhhofigvnh htrhhophihrdhnvghtqeenucggtffrrghtthgvrhhnpefhkedtffeuuefhgeetueeigfdu iefgffehfeetleehgfeugfetffegueefjeetteenucffohhmrghinhepthhlshifghdroh hrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehm theslhhofigvnhhtrhhophihrdhnvghtpdhnsggprhgtphhtthhopeefpdhmohguvgepsh hmthhpohhuthdprhgtphhtthhopegurghvihgusggvnhestghhrhhomhhiuhhmrdhorhhg pdhrtghpthhtohepshhtvghphhgvnhdrfhgrrhhrvghllhestghsrdhttggurdhivgdprh gtphhtthhopehtlhhssehivghtfhdrohhrgh
X-ME-Proxy: <xmx:B_XhZwftGnPUIg9BcGH7N08AU6DRPVXOVGnowDgHnuUBCt-Fa6NABQ> <xmx:B_XhZyKiwgxM7etSdplnEHDjLL2r1x5IQciYgDhOhbsAnSwe7Oxeeg> <xmx:B_XhZ9JYJXxelJBiNGj6MRccL_k1Zt6aHYzIsL32A8ge9BivNfrXuw> <xmx:B_XhZ7wZMugOkQWiNRQhcTZoGYEXarQx8MHI11XPorVGfibNgdioxQ> <xmx:CPXhZ0XuHzSTL0Tz7VfykuPJhivuX_5DNFlWkpAvypMu1veQ2uXT7UOJ>
Feedback-ID: ic129442d:Fastmail
Received: by mailuser.phl.internal (Postfix, from userid 501) id CBA56336007C; Mon, 24 Mar 2025 20:12:55 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
MIME-Version: 1.0
X-ThreadId: T92f20e4bb1057234
Date: Tue, 25 Mar 2025 11:12:34 +1100
From: Martin Thomson <mt@lowentropy.net>
To: David Benjamin <davidben@chromium.org>
Message-Id: <4f8f7341-df22-403e-bfba-8dfc77ec0b76@betaapp.fastmail.com>
In-Reply-To: <CAF8qwaBJQ6KP=GUiy3kg1ApHN5YDTMFuNRjRr3DZ29gH5eKq_A@mail.gmail.com>
References: <179d3e25-6ff2-4557-af5c-ad64aaab43b0@cs.tcd.ie> <CAF8qwaDGWdXAJj2k=wOjJ7eqz9++60W+PkWucDNdP653boBB9Q@mail.gmail.com> <f2bff36b-6a47-43b8-8a34-a33f94c6aea8@betaapp.fastmail.com> <CAF8qwaBJQ6KP=GUiy3kg1ApHN5YDTMFuNRjRr3DZ29gH5eKq_A@mail.gmail.com>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Message-ID-Hash: 2MY2FLAK3IRGC6UWYKY4O4D2WRBTTQD3
X-Message-ID-Hash: 2MY2FLAK3IRGC6UWYKY4O4D2WRBTTQD3
X-MailFrom: mt@lowentropy.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "<tls@ietf.org>" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: checking a bit of ECH behaviour
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/0iv5LSG4OO7b1m8dYFDzaAue_34>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Tue, Mar 25, 2025, at 07:31, David Benjamin wrote:
> That's a 2^-64 
> probability, which was discussed here:
> https://tlswg.org/draft-ietf-tls-esni/draft-ietf-tls-esni.html#section-10.9-2

Yeah, I was thinking holistically, but the argument made there is that the per-connection probability is far lower than the natural connection failure rate.  Never mind.

v2.46.0 | Report a Bug | By Email | System Status