Re: [TLS] Encrypting record headers: practical for TLS 1.3 after all?

[Stephen Farrell <[e-mail]>]

On 02/12/15 15:38, Jacob Appelbaum wrote:
>> > It’s quite
>> > useful in hotspot/public wifi environments where making policy decisions
>> > based on hostname is more than sufficient, and explicit user configuration
>> > of proxy settings is a non-starter.
> That is an attack in my book and public hotspots that do MITM are also
> a problem that we need to solve. It is partially solved with WISPr
> XML, I think. Though everything in this space is awful because it
> breaks everything by default while a system thinks it is online.
> 

There's a WG in the process of being chartered about captive
portals [1], not sure exactly what it'll end up producing, but
that's a place to go if interested in this specific topic.

Cheers,
S.

[1] https://datatracker.ietf.org/doc/charter-ietf-capport/