IETF Logo Mail Archive

Re: [TLS] ESNI/ECH: minor progress, much githubbery

Christopher Patton <cpatton@cloudflare.com> Tue, 29 September 2020 14:51 UTC

Return-Path: <cpatton@cloudflare.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65D7D3A0E9B for <tls@ietfa.amsl.com>; Tue, 29 Sep 2020 07:51:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.298
X-Spam-Level:
X-Spam-Status: No, score=-3.298 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cloudflare.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B9EREKKBfyno for <tls@ietfa.amsl.com>; Tue, 29 Sep 2020 07:50:58 -0700 (PDT)
Received: from mail-qk1-x72e.google.com (mail-qk1-x72e.google.com [IPv6:2607:f8b0:4864:20::72e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 939623A0E98 for <tls@ietf.org>; Tue, 29 Sep 2020 07:50:58 -0700 (PDT)
Received: by mail-qk1-x72e.google.com with SMTP id q5so4563289qkc.2 for <tls@ietf.org>; Tue, 29 Sep 2020 07:50:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FOlZrZvtspGlpXATANDctPGJp4uVEGok0fAnNEfeP2c=; b=AnGn5JRSUfUopG5QVUvjuIN1Lw5kJCjWB/KYi0SqvKI7ezpsKVxC4w+NcBbxqNDHsJ Ehb4HnnnGAPrqz/YYEEoHf00N+Jh0rx8GfJT7Z8qyJtbVtJ79jHWAL0+SSOwRjnOJwNW pbscIKymjul1NiTI/t6C9vWvYsM4TKUKj1428=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FOlZrZvtspGlpXATANDctPGJp4uVEGok0fAnNEfeP2c=; b=O3jHQB8PfEqdakFrjr6ayxc8VXKYA4STAWdmdU3B4QeoOXdsxqH3eWQO4+8QdkZtKj RIq8nq35UtT8n5/NeZhawidRNxP1n1mfRkx+uSEwi9Bqw0YB4EPEGzPGIVWy22sxWmCY MFcR07w946auEtG4G6GF73iTCjE0tEpNcpcFCjcP0ufCVGDwjdO85zsVHrBP2eZ0haBE npQYBqQ/xpCeX/Kx8wi0c69cpBFwPys6RvX9w/bURtRcm1xcf67LDvfZyaP7j5jWUdGC GKVGPed5R7XcXp8nL5HmApZOE8PhNJtd7hi+mnIrHsqWFtw3IF9AdjSGXs0RzyDLIwiA KZAA==
X-Gm-Message-State: AOAM531BZMtMZp9mtx0l2mYMTUtkwqQLRR6bo8FoKfiWkH71xqUifIPD nmt0Rzj5p78lWUcAdQ4GLddgWctpgQopryk5kSckOw==
X-Google-Smtp-Source: ABdhPJxa4XA2iOfRokxaA0OLYojZY3mxpqsaafLMl5so0/B30clU18zxvjRChIBd376+BAmxmUrhP6m7BKGfs5VlgyQ=
X-Received: by 2002:a37:a2cc:: with SMTP id l195mr4290946qke.324.1601391057417; Tue, 29 Sep 2020 07:50:57 -0700 (PDT)
MIME-Version: 1.0
References: <72d35b92-ea36-b6b7-5e35-ba528ba5faf7@cs.tcd.ie> <CAChr6SyObv29gzofL4yL29nNXxVGR5xZcafK0oTz9qnAQ2Yf6Q@mail.gmail.com>
In-Reply-To: <CAChr6SyObv29gzofL4yL29nNXxVGR5xZcafK0oTz9qnAQ2Yf6Q@mail.gmail.com>
From: Christopher Patton <cpatton@cloudflare.com>
Date: Tue, 29 Sep 2020 07:50:46 -0700
Message-ID: <CAG2Zi23_aEckzY3Ahawx=A3N7N=Hk1g7jcrvf9Wh83LJtopU4g@mail.gmail.com>
To: Rob Sayre <sayrer@gmail.com>
Cc: "tls@ietf.org" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000001fe0f005b074e949"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/e3zNtXZldpIYdP9vKzbFXWtC_y4>
Subject: Re: [TLS] ESNI/ECH: minor progress, much githubbery
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Sep 2020 14:51:00 -0000

Hi Rob,


> Are there OpenSSL / NSS / etc implementations others can work from?
> Probably the best way to lock this in and ship is to write the code.
>

There are three implementations I'm aware of, all works in progress:

   1. Cloudflare's prototype (written by me):
   https://github.com/cloudflare/go/pull/30
   2. boringSSL: https://bugs.chromium.org/p/boringssl/issues/detail?id=275
   3. NSS: https://bugzilla.mozilla.org/show_bug.cgi?id=1654332

The first (1.) is nearly complete and undergoing review.

Best,
Chris P

On Mon, Sep 28, 2020 at 7:58 PM Rob Sayre <sayrer@gmail.com> wrote:

> On Mon, Sep 28, 2020 at 12:55 PM Stephen Farrell <
> stephen.farrell@cs.tcd.ie> wrote:
>
>>
>> Hiya,
>>
>> Today I read over the diff between the latest ESNI/ECH
>> version and draft-07. [1] I have the following comments:
>>
>> 1. The volume of discussion on github is a deterrent. (*)
>>
>
> I agree the churn has seemed surprisingly heavy. The changes look
> well-meaning, but I don't really see a plan.
>
> Are there OpenSSL / NSS / etc implementations others can work from?
> Probably the best way to lock this in and ship is to write the code.
>
> thanks,
> Rob
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>

v2.30.2 | Report a Bug | By Email | System Status