[TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt
Stephen Farrell <stephen.farrell@cs.tcd.ie> Tue, 02 September 2025 19:16 UTC
Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 82E5D5C3FA0F for <tls@mail2.ietf.org>; Tue, 2 Sep 2025 12:16:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9y5orc-ashvW for <tls@mail2.ietf.org>; Tue, 2 Sep 2025 12:15:59 -0700 (PDT)
Received: from OSPPR02CU001.outbound.protection.outlook.com (mail-norwayeastazon11023125.outbound.protection.outlook.com [40.107.159.125]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 285F45C3FA07 for <tls@ietf.org>; Tue, 2 Sep 2025 12:15:58 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=OrT/C8t8BNntR7qtEr5fmbshDoWpwRL3Si5keXWcOw0RpFY0KYfYS23PUHcWGhB9ZzyIvRQnS6x5UfumBAIIII76ZmYiGWviaX1o2qDRf3D7ZJrkdoXSLRVP8xuSaSrmCitvc4WY0/I68Vb0r6BtNfKO746vamuEW89ZFVobcBXYTU+lDDKKlbnfcxo3ZVtM7lc5SjnsUm4iqi/Bz3ELisIiszduxEIveJXeFfSvBzL61UJJEwhLLRkIm65KDN5dt0g4oDKFPEvyV42OR/d+xx07r7/Xtu8oH4A1D20SDV2ld/pTYHQGAWBVJTp3FquPF/FwAYcaz2gsdNzdzi8jww==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=5H3BIGuuc+MJWl1sUX3vfFfLLd8v+uOiHHVyBNTk9hA=; b=ysBcjN76d/XAeafH/KGzjyvbEQAzpuGVOsS/D2Ao6zbD4A47hQ+ZlEPFvILmsZzcKQ5BYiAzdMSKbDlvbDX8qg0qq0bFghcw8UefZS6/U+vtzYS+JLw10IDVZ7se6NM7cOeIWXHgXnilL8yvxLV2zXJmBZ8tmv/UPya94LgN2RT63hc5/5J5QjuECNF7nVe0RrqJ48Nv6U29Tur+XmJnDQawTdRkNm1xLOoi+VwaTQZUpV1A+VxYEMryeKISjCmwvNXVcdnULEI8yxkVp6c+0weCwB83lhMpvO9NNV5Xf7UEdzhnkKtXOe7dAmrKWsfrGfQ6rnS7evJVKdYBgWU8ZQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5H3BIGuuc+MJWl1sUX3vfFfLLd8v+uOiHHVyBNTk9hA=; b=pWl5PCY5wvPvf4U5zzTH4BYMl3WqWUUzWPQhrmM8JWKd6afpBx7/xezc6alItXZrA6PpPXuEyHagAjvtTqR+KAmTlSQXnbuJKkk/ZJqugEsV47E+zMQKQMb3FRcvoUqlEuHRRFFP1W6YidNSGcYMB6a5YtsnjJOJAXk9KajawdNN6Ff4L+K2Fpb5s7+uouiktQnhZH2DFJXNSpYiuL68AC2H1drPW1o6mytXEPPE29ZPqZjawQ6SVBCUXPk/hRn9HCsg0QUkjFeRhsDc2NKizcl4Si7UuSFCWFrtfIY/OQcurHkP6Q4MqKNAXH36He59fowdHwHHLoHaXV3yBY1xvw==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from PA3PR02MB11163.eurprd02.prod.outlook.com (2603:10a6:102:4b4::19) by PA1PR02MB11490.eurprd02.prod.outlook.com (2603:10a6:102:4e0::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9073.27; Tue, 2 Sep 2025 19:15:53 +0000
Received: from PA3PR02MB11163.eurprd02.prod.outlook.com ([fe80::d308:cb8d:9d3d:31b1]) by PA3PR02MB11163.eurprd02.prod.outlook.com ([fe80::d308:cb8d:9d3d:31b1%5]) with mapi id 15.20.9073.026; Tue, 2 Sep 2025 19:15:53 +0000
Message-ID: <5bdb688e-10fd-40bd-8ab3-25906c11f916@cs.tcd.ie>
Date: Tue, 02 Sep 2025 20:15:49 +0100
User-Agent: Mozilla Thunderbird
To: Watson Ladd <watsonbladd@gmail.com>
References: <175681980809.1724257.5414760990331082108@dt-datatracker-67876766b7-bkzgr> <123de075-e895-4b03-ab7a-75290ae03c8c@cs.tcd.ie> <CACsn0cnkYKxPnE6L_WZqjkHzgvR6SO9fpgQHANX1P58LqeyicA@mail.gmail.com>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <CACsn0cnkYKxPnE6L_WZqjkHzgvR6SO9fpgQHANX1P58LqeyicA@mail.gmail.com>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------mQGZrLjXwOAqvEaQvjvrs25p"
X-ClientProxiedBy: DU2PR04CA0072.eurprd04.prod.outlook.com (2603:10a6:10:232::17) To PA3PR02MB11163.eurprd02.prod.outlook.com (2603:10a6:102:4b4::19)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: PA3PR02MB11163:EE_|PA1PR02MB11490:EE_
X-MS-Office365-Filtering-Correlation-Id: 74d78233-c106-4c2a-6d01-08ddea55223d
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|4022899009|376014|19092799006|366016|10070799003|1800799024;
X-Microsoft-Antispam-Message-Info: oah+GFABwYLrxKjYrtpDZyA8B/wwmQWlfNOAohCI33j64OW6a+AMMbjJgi8T/s9G6bJx8QjCjBJpON/LcR/sld7L3nE/2HJKgN9VSr25FOhEaaTVNnGuQWnes3vwN2eEb5cd7bIWfWAZrh0aPGQdZOJggCreFZDmilR3N2u+o1S3k2YNfp5KpQfHVvj41nDrw96JRCVwIk+YIB9O8JSJC4vmWY1mbwyfVNWyWlM3zmetwvw32Akr9T4Z5gkfDJl6XjdtdIAHwI8ojGTRNJuebhXkveKG/cUfVYPMXIumwp/FMILRfLMxBIFFrGM5KwIAENZou8GAWmnE25nhKANf4QBJJrC7fR4TcpT7Rdtw6BJgYurIj3obY+cdqxMLbICZ/K7Wdfhl8W1P5QaekW3jhSNLlnaPAIm7IhDhguGl9gSPP8cQ8Vd6f/Gw9oK8aJ2HYXcFpDVUHAM2t1EHmejQYKRWmrPQaJcwKdB0yPKyEdwhHpkpi74pAIOqJ8iE2hRbiNaYwcQiI9CiTWcUnzaNAc9vqeyFJWd1JpTF/CS95pI7GujaI0YcWnIj7y1HwqY8cJbt3FzG0JCfYBiwcYF3dOyMSdC3OgieRXtOoeLR5YdbIXKALFnqze9/niJBMARWiUanKYoDgOH4bceA/wVoZMzgf1HXtAkb8lLQw08AvEzCWpAqiPJ1NIITZ9ARfiqGk33OocCl/zW/RGqvjpxwbSNWbABY0h/mLmqY99C7+Dl9ndSZLDpvxeg1QmPF+l8nFzkOjiS3F49LC9z7mQ9gk1JQiPlDV4nIYTJKiIItBqar2D1RyDOFOZC0TdiOtZfXUPUWqKnxBdvfsxZKz891XtsOrgvKCF/mp2i0SrcRbJaE4WsNu9HcstPEZpPGPm1NMwVxug+WGLkPzbN5r8hhm1nQdwbTt2VU0E0NPcCZb1p7oHdLw8tKNmJkreKtJpJoyICpjzLdzgOfoaC6ld9Dbqao4KFcW44ErxL32m++Bo2YVBIKUBJ6C+jsObxIW71M0Wwg+WC5fubBl/ctSPs5I3M8TDrNzQzWygyvix/b/oPBhg+N1S17hZncPmyZMB5PpNUQXw9GQImE+Lc9zo8qACp6gf4OQii3kPUBkqF9OmmoE0E0f0ko2k4W/bwXY5l9TDvoGw+2MsbLyw2UK6sekC/RDlmYRwa17d504c3fKtgwSkfDGeIdX24xyIrj7yi+H8c4WBgLdROuoAjbzqScm/iTlIT0zawmtc5+nE4uytrQhDR4oTOaeARsPfvx628vFQPs6IL6bRb8VB4UgSBuL2TPigmlk38gKoC/U8beouaDgFoPJUhP5kzurg4ywL+R0fJTvKMruGh3h+ZdYWzhpuMxWhSfso1hK26N1plraT0=
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PA3PR02MB11163.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(4022899009)(376014)(19092799006)(366016)(10070799003)(1800799024);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: 74d78233-c106-4c2a-6d01-08ddea55223d
X-MS-Exchange-CrossTenant-AuthSource: PA3PR02MB11163.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Sep 2025 19:15:53.0925 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: qAdpNvJM/T6JXBgdiVQkKQP1LA9LXNQCt7Wt4mQdupeEKGDh26pPvR/nu4ykWiJG
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA1PR02MB11490
Message-ID-Hash: GGPAXICCTVUJHI5B2UY2SJD2KBRAQRI5
X-Message-ID-Hash: GGPAXICCTVUJHI5B2UY2SJD2KBRAQRI5
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/7kxBE8LCXLgkTTYfIFI-sG1awtM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
Hiya, On 02/09/2025 15:38, Watson Ladd wrote: > What's wrong with experiments in the experimental category? Do you mean why not proceed to an RFC as usual? We could, from my POV. OTOH, in this case there's only the one implementation that we know of (mine) and that's only been used in a test setup, so it doesn't seem unreasonable to wait and see if someone else implements. > More comprehensive read through coming, Thanks! Cheers, S. > but I do think the experimental > category is supposed to be for experiments and useful. > > Astra mortemque praestare gradatim > > On Tue, Sep 2, 2025, 6:41 AM Stephen Farrell <stephen.farrell@cs.tcd.ie> > wrote: > >> >> Hiya, >> >> We made a bunch of editorial changes after the comments >> received at IETF-123 with which the commenters seem ok, >> so the authors would like to ask if the chairs think this >> is ready for WGLC. (We understand the plan is to park it >> after that awaiting more implementation experience which >> is fine.) >> >> There are no outstanding issues or PRs on the git repo. [1] >> >> Cheers, >> S. >> >> [1] https://github.com/sftcd/wkesni >> >> On 02/09/2025 14:30, internet-drafts@ietf.org wrote: >>> Internet-Draft draft-ietf-tls-wkech-09.txt is now available. It is a >> work item >>> of the Transport Layer Security (TLS) WG of the IETF. >>> >>> Title: A well-known URI for publishing service parameters >>> Authors: Stephen Farrell >>> Rich Salz >>> Benjamin Schwartz >>> Name: draft-ietf-tls-wkech-09.txt >>> Pages: 18 >>> Dates: 2025-09-02 >>> >>> Abstract: >>> >>> We define a well-known URI at which an HTTP origin can inform an >>> authoritative DNS server, or other interested parties, about its >>> Service Bindings. Service binding data can include Encrypted >>> ClientHello (ECH) configurations, that may change frequently. This >>> allows the origin, in collaboration with DNS infrastructure elements, >>> to publish and rotate its own ECH keys. Other service bindng data >>> such as information about TLS supported groups is unlikely to change >>> quickly, but the origin is much more likely to have accurate >>> information when changes do occur. Service data published via this >>> mechanism is typically available via an HTTPS or SVCB resource >>> record. >>> >>> The IETF datatracker status page for this Internet-Draft is: >>> https://datatracker.ietf.org/doc/draft-ietf-tls-wkech/ >>> >>> There is also an HTMLized version available at: >>> https://datatracker.ietf.org/doc/html/draft-ietf-tls-wkech-09 >>> >>> A diff from the previous version is available at: >>> https://author-tools.ietf.org/iddiff?url2=draft-ietf-tls-wkech-09 >>> >>> Internet-Drafts are also available by rsync at: >>> rsync.ietf.org::internet-drafts >>> >>> >>> _______________________________________________ >>> TLS mailing list -- tls@ietf.org >>> To unsubscribe send an email to tls-leave@ietf.org >> >> _______________________________________________ >> TLS mailing list -- tls@ietf.org >> To unsubscribe send an email to tls-leave@ietf.org >> >
- [TLS] I-D Action: draft-ietf-tls-wkech-09.txt internet-drafts
- [TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt Stephen Farrell
- [TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt Watson Ladd
- [TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt Stephen Farrell
- [TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt Ted Hardie
- [TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt Stephen Farrell
- [TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt Ted Hardie
- [TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt Yaakov Stein
- [TLS] Re: I-D Action: draft-ietf-tls-wkech-09.txt Stephen Farrell