[TLS] Re: WG Last Call: draft-ietf-tls-wkech-11 (Ends 2025-11-25)

Sean Turner <sean@sn3rd.com> Fri, 14 November 2025 00:26 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D5E0A891B655 for <tls@mail2.ietf.org>; Thu, 13 Nov 2025 16:26:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ai77BsMxP4Wu for <tls@mail2.ietf.org>; Thu, 13 Nov 2025 16:26:05 -0800 (PST)
Received: from mail-pf1-x442.google.com (mail-pf1-x442.google.com [IPv6:2607:f8b0:4864:20::442]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 04022891B5F9 for <tls@ietf.org>; Thu, 13 Nov 2025 16:26:05 -0800 (PST)
Received: by mail-pf1-x442.google.com with SMTP id d2e1a72fcca58-7af603c06easo1604183b3a.0 for <tls@ietf.org>; Thu, 13 Nov 2025 16:26:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; t=1763079958; x=1763684758; darn=ietf.org; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:from:from:to:cc:subject:date:message-id :reply-to; bh=UHyXbOLACZU15RavyxhVjpM0mVnVKiIoPF5ocqHPqow=; b=We4ArhHEncrxdjTMYyXyChbYuHwdHVN1c/P9dhc8exLbuUX48gnN07gUXjCJV3fLmK O/Uedlc+HMR+SRJkI/TV+5UCFE8BDmQJlHDYumOxSwft8lu7qqXbHVxFRPYFlrlRmGKt ZNtfu8Vb8YihAQr5Usn8k6XU4sMTtY19bxR5M=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763079958; x=1763684758; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=UHyXbOLACZU15RavyxhVjpM0mVnVKiIoPF5ocqHPqow=; b=OJ+hfuWtw05xLkn5IgW3lp91W372RequiYL/rvUeXUoVQMpT2j2iFiboLcL4EOZkBZ qn1etD3zx1gYKtOzZ4b5d14d9ZBkuUNyiEHG4X4LdZfFIE42wZgmP9xyctbwVHs/qrNT amJJfzm+4m1CUitrxLK7mB49mtZTtXFJK33W23bsrK3l9Hxjecp79o+T7BUt5o0JZTcq 7FP9hqNL0cTC8XvVVjnTm9FPiCA6viecF13XtbwiZhqizNiArz6NXqCcYddM9mY82RFZ e9cS/lLrbVFjqOKo+NRVxZKgwtusECTurD1j55mEZsOtWqpI/VfjGq8yU039R8Qe6qN4 SCYw==
X-Gm-Message-State: AOJu0YwTBNo17py4X8NkmjbMwdEnrxXk8J7Okgfzx/CmGs4AEh0oqdaV AL8DxhptTRgaRQkCEncTZFN465Uwim6KGxF/8s3PPJ4nu5TfZtXUCtAPgNpLP+XMiTz5B6J+tGd 31x+XP+PJMrBB
X-Gm-Gg: ASbGncsxtm3Rwv87DRe8Y2IHwxzN1jYldh37EpMErkHeLFCWMfV3hViP/KmePghcVKO VN9Bo1Tgw/O5WgPcIpviXa7TbVsarXXrJhaHjP8BlEZ9fGcfSgC3Vw4IAwFicWCmH2Y9tttrRfJ u8x6uLDk7orbxDhYWvuPD5osh7ewBN32BB7fYicxKDQvlCHuu+5Sxb9aUIdlJ7PJbmpi59yvXlu c8rhQ384HQ6vNGXrAkY6Xx7/4TxHjveXMv4/7nADcLkAHK+tb5d4zlSpcf831b5eTLe7GxeMd9N TcHQy1kHhrrLllF/lcaJgnXg99Pv6QqwkituxPhhTtb4Z4/Rx7At5EvJO4O+vARgtDwK7aS80W0 TSm9D/vC8ctPXqHzPuRn1+MkAL37/rKBOht/zlgSz2U/B00zZSzbObRASr+/prFHFBLRLJALCvP s1B9E47Qyxhg51/yInsu7a8j8c2yGvCD+Aa4DyOuYxZbrIoXzHQy0=
X-Google-Smtp-Source: AGHT+IE6zxsgeuBpBJ19M/8dOMjLKsZZLgJqUsUSHl4mm/h9q63pLjoozNlBr/mJ/VaM3oCOXQwoDg==
X-Received: by 2002:a05:6a21:6d95:b0:343:9397:c4d6 with SMTP id adf61e73a8af0-35ba23a5f48mr1383440637.23.1763079957894; Thu, 13 Nov 2025 16:25:57 -0800 (PST)
Received: from smtpclient.apple ([153.246.73.25]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-bc37703a0d9sm3095703a12.31.2025.11.13.16.25.56 for <tls@ietf.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 13 Nov 2025 16:25:57 -0800 (PST)
From: Sean Turner <sean@sn3rd.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81\))
Date: Fri, 14 Nov 2025 09:25:36 +0900
References: <176226681584.653856.6794193315450289971@dt-datatracker-5df8666cb-7l4w5>
To: TLS List <tls@ietf.org>
In-Reply-To: <176226681584.653856.6794193315450289971@dt-datatracker-5df8666cb-7l4w5>
Message-Id: <0F7F84C2-558C-4265-91E3-A3EBFA520229@sn3rd.com>
X-Mailer: Apple Mail (2.3826.700.81)
Message-ID-Hash: E7AGXIQWMUEENJ236PD3T6IDHOWALUNP
X-Message-ID-Hash: E7AGXIQWMUEENJ236PD3T6IDHOWALUNP
X-MailFrom: sean@sn3rd.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-wkech-11 (Ends 2025-11-25)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/dNb04f4lvkGDDzJY_sJZIA-LDnw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Just a reminder that this is still on-going.

spt

> On Nov 4, 2025, at 23:33, Sean Turner via Datatracker <noreply@ietf.org> wrote:
> 
> 
> Subject: WG Last Call: draft-ietf-tls-wkech-11 (Ends 2025-11-25)
> 
> This message starts a 3-week WG Last Call for this document.
> 
> Abstract:
>   We define a well-known URI at which an HTTP origin can inform an
>   authoritative DNS server, or other interested parties, about its
>   Service Bindings.  Service binding data can include Encrypted
>   ClientHello (ECH) configurations, that may change frequently.  This
>   allows the HTTP origin, in collaboration with DNS infrastructure
>   elements, to publish and rotate its own ECH keys.  Other service
>   binding data such as information about TLS supported groups is
>   unlikely to change quickly, but the HTTP origin is much more likely
>   to have accurate information when changes do occur.  Service data
>   published via this mechanism is typically available via an HTTPS or
>   SVCB resource record.
> 
> File can be retrieved from:
> https://datatracker.ietf.org/doc/draft-ietf-tls-wkech/
> 
> Please review and indicate your support or objection to proceed with the
> publication of this document by replying to this email keeping tls@ietf.org
> in copy. Objections should be motivated and suggestions to resolve them are
> highly appreciated.
> 
> Authors, and WG participants in general, are reminded again of the
> Intellectual Property Rights (IPR) disclosure obligations described in BCP 79
> [1]. Appropriate IPR disclosures required for full conformance with the
> provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of
> any. Sanctions available for application to violators of IETF IPR Policy can
> be found at [3].
> 
> Thank you.
> 
> [1] https://datatracker.ietf.org/doc/bcp78/
> [2] https://datatracker.ietf.org/doc/bcp79/
> [3] https://datatracker.ietf.org/doc/rfc6701/
> 
> 
>