[TLS] Re: WG Last Call: draft-ietf-tls-wkech-11 (Ends 2025-11-25)

Sean Turner <sean@sn3rd.com> Thu, 04 December 2025 14:09 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 62E6D955AFFC for <tls@mail2.ietf.org>; Thu, 4 Dec 2025 06:09:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4T5TFn28mx65 for <tls@mail2.ietf.org>; Thu, 4 Dec 2025 06:09:38 -0800 (PST)
Received: from mail-qv1-xf41.google.com (mail-qv1-xf41.google.com [IPv6:2607:f8b0:4864:20::f41]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id F32B5955AE47 for <tls@ietf.org>; Thu, 4 Dec 2025 06:08:52 -0800 (PST)
Received: by mail-qv1-xf41.google.com with SMTP id 6a1803df08f44-8804f1bd6a7so7738376d6.2 for <tls@ietf.org>; Thu, 04 Dec 2025 06:08:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; t=1764857332; x=1765462132; darn=ietf.org; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:from:from:to:cc:subject:date:message-id :reply-to; bh=VWkHBDKpC8EGHDpUeL97qo3A4AUsGhAOwO4I3DYQaHE=; b=fbhENCT+QM0PK102RqkjSZGg53wA6CvRp+eZFUdOJDeXyYRHfVOMVvX1EHY7HnUtZA eQp255wapGkzc+shpdVjeSLewDzZ9a097B4w8AX2m1MUKdTwqWDoDZl1QoybCbgQmH9o Z7RQD+2FoJrHIO96f3wJyfcY41Ih5vBYdUGjo=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764857332; x=1765462132; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=VWkHBDKpC8EGHDpUeL97qo3A4AUsGhAOwO4I3DYQaHE=; b=YPT0cyKqnLpOFrR7B63d28zJpzmlPVGTpKjvwz4zvvz9piZK7z2q0MghpyUhRSTa41 UMVAqsUaEhZyJ7oJ+fi90KScuNShjgg1DN5qUysquGfa3KA+v5MYZXZ+HjmT6xNQAGBo zIRHsv3pLE3Ew0Y4UNdqJ8McVdrrYjEI4VOX/0s5/RAl3+CY9ag9Q3R4ZfcnWAIeCvz4 ui1tnavDPxnvwbaeY3f+IQPcOAT4v2H+bItyLlZiSBydtcCBAAzN/r+mnYT3EEtpmUvo KROeDWHtMq021a3cBvYfAzhxF+Gsc9qOYu3tZTg1YI0vajdVngvVq8ip1iN5ceww3Uet UCcA==
X-Gm-Message-State: AOJu0Yy3JKia2RPdw0DW5p9SyliosSOVu+WQz5XhHG/BPN7S5ZFamEDb xeX5BRJgmGZp0WKV7sYLYot8qLQafrW+ljdXa6dWVZxfyIYvw8I9s3ui+yZW03PFT9NKbXy8l1F v3Sm8+i5RoQ==
X-Gm-Gg: ASbGncsYfPYKxyCChsLyOMc1M9qra7TaQ8FbLF2DEZW0JyvuD3CS1C5CW6/ahbrCY8S cA/N5PxJsYJlBCCD2DkY4sq2w1gjVrke7WNNuIcno7ugEDxhJfA1XJtmZoHOEkb3W5XX9CPT0C3 jbI4QqHdWJvf5dkXMk0VY5wpJuXp3GX8rmUms1O6LveEDK72jwcMaL7jUqGpA6BG5JkI523G1Td ZV2wkmJBsDXBh09zFRUPeOnJxWYAsOgsgduLXeSTYg4mbLrMGELjv738PTZqp2wvh8IxcqSjLKf DLbFZBVkraC/l+XhbJgf3ULPn248ByADKGTvesZmZWGxDOZmUAzi/tAfLXjero1YpHwi+8StHXy +nA5RP0/i8SE7UC8tIYW8NJaLFd8VqHbVoq+mv/9iP6R1oK/bsnsNikOQmGg30SrBTYUfxd70By +qI1EVzdEocU6xr+T6ilFvCgyCdY1mnw==
X-Google-Smtp-Source: AGHT+IFDcOdHkDHcbfcEQcbWRTymeTzkhwRFjpL0EYUEsActG1S2MS23URQ9+8JhyLJnF85ksOk9JQ==
X-Received: by 2002:a05:6214:33c9:b0:87f:fee5:c3a6 with SMTP id 6a1803df08f44-888248c8782mr45300956d6.49.1764857332427; Thu, 04 Dec 2025 06:08:52 -0800 (PST)
Received: from smtpclient.apple ([2600:4040:2527:300:90b9:6b1c:7afd:4548]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-88827f344d0sm11422096d6.7.2025.12.04.06.08.51 for <tls@ietf.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 04 Dec 2025 06:08:51 -0800 (PST)
From: Sean Turner <sean@sn3rd.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81.1.3\))
Date: Thu, 04 Dec 2025 09:08:31 -0500
References: <176226681584.653856.6794193315450289971@dt-datatracker-5df8666cb-7l4w5> <0F7F84C2-558C-4265-91E3-A3EBFA520229@sn3rd.com> <13C0BECD-DCEF-4E83-9901-0E9DAB585847@sn3rd.com> <0CFC6FD0-5C83-4515-911F-865316AF161A@sn3rd.com>
To: TLS List <tls@ietf.org>
In-Reply-To: <0CFC6FD0-5C83-4515-911F-865316AF161A@sn3rd.com>
Message-Id: <9176CDEE-5EB6-4EF9-80D5-E317EE4FA9F9@sn3rd.com>
X-Mailer: Apple Mail (2.3826.700.81.1.3)
Message-ID-Hash: JYKVBVKRZYYZJC7DYSMAWOJPTVGI7TPW
X-Message-ID-Hash: JYKVBVKRZYYZJC7DYSMAWOJPTVGI7TPW
X-MailFrom: sean@sn3rd.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-wkech-11 (Ends 2025-11-25)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/idFR4gv4GxYGszQlAJAcpQxzPBQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

- replying to my own message

Hi! As noted @ our IETF 124 session, the plan was/is to park this document until we gather implementation experience after the WGLC. I will move the I-D to the “Waiting for Implementation” state. Once we get some experience, we will redo the WGLC.

spt

> On Nov 24, 2025, at 09:20, Sean Turner <sean@sn3rd.com> wrote:
> 
> A final reminder that this WGLC ends tomorrow.
> 
> spt
> 
>> On Nov 20, 2025, at 11:00, Sean Turner <sean@sn3rd.com> wrote:
>> 
>> Another reminder that this is still on-going.
>> 
>> spt
>> 
>>> On Nov 13, 2025, at 19:25, Sean Turner <sean@sn3rd.com> wrote:
>>> 
>>> Just a reminder that this is still on-going.
>>> 
>>> spt
>>> 
>>>> On Nov 4, 2025, at 23:33, Sean Turner via Datatracker <noreply@ietf.org> wrote:
>>>> 
>>>> 
>>>> Subject: WG Last Call: draft-ietf-tls-wkech-11 (Ends 2025-11-25)
>>>> 
>>>> This message starts a 3-week WG Last Call for this document.
>>>> 
>>>> Abstract:
>>>> We define a well-known URI at which an HTTP origin can inform an
>>>> authoritative DNS server, or other interested parties, about its
>>>> Service Bindings.  Service binding data can include Encrypted
>>>> ClientHello (ECH) configurations, that may change frequently.  This
>>>> allows the HTTP origin, in collaboration with DNS infrastructure
>>>> elements, to publish and rotate its own ECH keys.  Other service
>>>> binding data such as information about TLS supported groups is
>>>> unlikely to change quickly, but the HTTP origin is much more likely
>>>> to have accurate information when changes do occur.  Service data
>>>> published via this mechanism is typically available via an HTTPS or
>>>> SVCB resource record.
>>>> 
>>>> File can be retrieved from:
>>>> https://datatracker.ietf.org/doc/draft-ietf-tls-wkech/
>>>> 
>>>> Please review and indicate your support or objection to proceed with the
>>>> publication of this document by replying to this email keeping tls@ietf.org
>>>> in copy. Objections should be motivated and suggestions to resolve them are
>>>> highly appreciated.
>>>> 
>>>> Authors, and WG participants in general, are reminded again of the
>>>> Intellectual Property Rights (IPR) disclosure obligations described in BCP 79
>>>> [1]. Appropriate IPR disclosures required for full conformance with the
>>>> provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of
>>>> any. Sanctions available for application to violators of IETF IPR Policy can
>>>> be found at [3].
>>>> 
>>>> Thank you.
>>>> 
>>>> [1] https://datatracker.ietf.org/doc/bcp78/
>>>> [2] https://datatracker.ietf.org/doc/bcp79/
>>>> [3] https://datatracker.ietf.org/doc/rfc6701/
>>>> 
>>>> 
>>>> 
>>> 
>> 
>