IETF Logo Mail Archive

Re: [TLS] ESNI/ECH: minor progress, much githubbery

Christopher Patton <cpatton@cloudflare.com> Tue, 29 September 2020 18:31 UTC

Return-Path: <cpatton@cloudflare.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40F4C3A0C2E for <tls@ietfa.amsl.com>; Tue, 29 Sep 2020 11:31:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.298
X-Spam-Level:
X-Spam-Status: No, score=-3.298 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cloudflare.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gc427vyvylcr for <tls@ietfa.amsl.com>; Tue, 29 Sep 2020 11:31:04 -0700 (PDT)
Received: from mail-pj1-x1033.google.com (mail-pj1-x1033.google.com [IPv6:2607:f8b0:4864:20::1033]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84D373A0C33 for <tls@ietf.org>; Tue, 29 Sep 2020 11:31:04 -0700 (PDT)
Received: by mail-pj1-x1033.google.com with SMTP id kk9so3121446pjb.2 for <tls@ietf.org>; Tue, 29 Sep 2020 11:31:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=KXiXrGbJ+fN3yhE9SRhaNB3M9XhtF8LE+dl01Gf8+u0=; b=C/sqZ1agUJDOeL2V1zmHIRC6qYa1/E/zWHwCcySyhDem8QaijgIry1poEn6Q0f55IL dXxiSNspUu/uoe82f2csBlLfwuH3o8YSOi9GzGeN9EY8zpiGjyDddbeWdRnKj19LzI6m BSHicQZgLTmJFtjM4iCl3waT7ifi7cElIslvo=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=KXiXrGbJ+fN3yhE9SRhaNB3M9XhtF8LE+dl01Gf8+u0=; b=APMAnYWU7Hh916XIktnMmZnNmt++c3Zt5F4T3qp04MB3K5fUTaFB2qFhOHGo3dH9p+ jmJRjvrn6erStEpSLxMikzstvILHy7NZaCKIHoKYGqPst7swa+XC6Xk67lsPZBCXE9c5 ifo9koHAQBxxfQ5jPPwJ2+HmLm2P+Yy4cxv2Y8YgYLfKRNSMbZs/b3QFliwH2soZiPrk j5zJp0PSV/cAwthK5MCRiP0N7DixEkknqfuxBKVp9wKjxSJ7rcn02C1s3nTjH3yTU8Na jOe+qvH4+DqYRWEjQNWWmIDhoJGYVNUEVr9bRtD0jqRqfLlGpwznMjPrq/huMNxGwqbc cQDg==
X-Gm-Message-State: AOAM533rsZbOHCTk2vweY33ITaWjT+479UXu+VDFJYgYE77qpfznLjjW 3bMIhN3ruLeUp+DIb91oKEQRiOhtGfMq/bSAIVObDw==
X-Google-Smtp-Source: ABdhPJwXtim3ValUPxwA5RRUHqNsUvJj4VdRrgqOYXX9UMEVH+GW+22q/gOrMS8XX0997SrqrjYHOhncbx2MPw/zx4o=
X-Received: by 2002:a17:90b:33cb:: with SMTP id lk11mr4999422pjb.98.1601404263761; Tue, 29 Sep 2020 11:31:03 -0700 (PDT)
MIME-Version: 1.0
References: <72d35b92-ea36-b6b7-5e35-ba528ba5faf7@cs.tcd.ie> <CAChr6SyObv29gzofL4yL29nNXxVGR5xZcafK0oTz9qnAQ2Yf6Q@mail.gmail.com> <CAG2Zi23_aEckzY3Ahawx=A3N7N=Hk1g7jcrvf9Wh83LJtopU4g@mail.gmail.com> <CAChr6SwaZwzRE3pV1eO19gmB2wsO9azuDks=hHZniJoMF0UzPw@mail.gmail.com>
In-Reply-To: <CAChr6SwaZwzRE3pV1eO19gmB2wsO9azuDks=hHZniJoMF0UzPw@mail.gmail.com>
From: Christopher Patton <cpatton@cloudflare.com>
Date: Tue, 29 Sep 2020 11:30:52 -0700
Message-ID: <CAG2Zi21+6k-PORRYHBnS6rTL-B_7irmkD0NGmBZz-Du9c4zdXQ@mail.gmail.com>
To: Rob Sayre <sayrer@gmail.com>
Cc: "tls@ietf.org" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000048b2d205b077fc19"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/Epbxna3NrZDAo4_PvW3bD2lXwjc>
Subject: Re: [TLS] ESNI/ECH: minor progress, much githubbery
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Sep 2020 18:31:06 -0000

Sweet! Please let me know if you find any bugs on my end.  Feel free to
chime in on the PR.

Chris P.

On Tue, Sep 29, 2020 at 11:00 AM Rob Sayre <sayrer@gmail.com> wrote:

>
>
> On Tue, Sep 29, 2020 at 7:50 AM Christopher Patton <cpatton@cloudflare.com>
> wrote:
>
>> Hi Rob,
>>
>>
>>> Are there OpenSSL / NSS / etc implementations others can work from?
>>> Probably the best way to lock this in and ship is to write the code.
>>>
>>
>> There are three implementations I'm aware of, all works in progress:
>>
>>    1. Cloudflare's prototype (written by me):
>>    https://github.com/cloudflare/go/pull/30
>>    2. boringSSL:
>>    https://bugs.chromium.org/p/boringssl/issues/detail?id=275
>>    3. NSS: https://bugzilla.mozilla.org/show_bug.cgi?id=1654332
>>
>> The first (1.) is nearly complete and undergoing review.
>>
>
> Great. I will work to get Rustls interoperating with it. The current
> code[1] only implements draft -02.
>
> thanks,
> Rob
>
> [1] https://github.com/ctz/rustls/pull/318
>

v2.30.2 | Report a Bug | By Email | System Status