[TLS] Re: WG Last Call: draft-ietf-tls-wkech-11 (Ends 2025-11-25)

Sean Turner <sean@sn3rd.com> Thu, 20 November 2025 16:01 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E8EFB8D4BE97 for <tls@mail2.ietf.org>; Thu, 20 Nov 2025 08:01:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zuELX9ae5ryN for <tls@mail2.ietf.org>; Thu, 20 Nov 2025 08:01:50 -0800 (PST)
Received: from mail-qk1-x742.google.com (mail-qk1-x742.google.com [IPv6:2607:f8b0:4864:20::742]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B0C588D4BDA0 for <tls@ietf.org>; Thu, 20 Nov 2025 08:00:39 -0800 (PST)
Received: by mail-qk1-x742.google.com with SMTP id af79cd13be357-8b2dcdde698so140903385a.3 for <tls@ietf.org>; Thu, 20 Nov 2025 08:00:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; t=1763654439; x=1764259239; darn=ietf.org; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:from:from:to:cc:subject:date:message-id :reply-to; bh=SAQD7zeOGD0BXPpJ5ddh6ffJ7OI62Qlg45abVWZmn+w=; b=V/fC2s6yhuyco7KttU/pNxsbpcL8bku0ADjk5mF/8Ztfi5OIZJoSXloE85AYbcN15T VN+WYmD/HwwfQmJYpUbiJ5C82z7uT9AviZZTl5kqpqdkh5rIUhNz0havQ3CP5DoMvbl0 lfjnRmETpWnDCC7OYxVzwX+JTNnN5L/Fd2AgE=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763654439; x=1764259239; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=SAQD7zeOGD0BXPpJ5ddh6ffJ7OI62Qlg45abVWZmn+w=; b=sVyJv1LJ0Rn8wm7IFtOCvTQdzfICXw/COItO5Xe9L/wkOeILzWhiyYlYzQ5e3MsanH nhI2WcQnizdpPBSet8CmlHL4Zq8ABdbrOcNIp1GlLSoU38PRCazfCf4s68ZmkyKyN92v +JhXzG7BWtdReac+1hrvYofgxxkYah6+Cb6O6FcKnw2jLLgM2koB1QHbzEXyDb672oHh qeLMXyey4c+4BQgYcL6GF9NLg1h1/ekfYUQEDPutElYT5r0OAd9TDeK4uOkyrVMoNRRC oLBD57N9TPcHXiEPQ3koy0ppRA47b784/C/c0aHKZutEJ97Pvw0DKqgRFhKYBvufiq7d 1nxg==
X-Gm-Message-State: AOJu0Yxraji+t46kkS1tb+NMe+v7H/+2ZGQAoKkviXL4l1TxNgCEULGh zNodeMaJ31s09iI4mJ6osgoIut7THsgw4e0E3pfUDUuUnn8zNcVfSsUUkFW01UwP54YygDjrf50 48tRRKRy8Gg==
X-Gm-Gg: ASbGncu3IF2yRRuvmAgCXYmQBY9hyIqIEOVXoCzEITWvqvWi8cq+08QN/CigguH3xum 5/QmOY/ZEa+ntSpqFLYdEMvgYR62UyTBMyt2ivX7Wpy8EA1+AQWIpb2F93s0vO4Qw+bJ+WtnS5Q NemnHywBinMK8xZr/LitIhrjjWuzc40JkkReeEiT2VrlsbFF2T4GyJgvs8Fdu3dOwtLumVUaIlQ a/n+dvQuOGA5hkNPWAur0GAthmyCZaqepfcos6hq8khpoiZVAhdooeSf4bqQRiq4a8xQub5nCRp esrdBgIOkK1TSRQA7dBVwkfSbkVxBR9qI2bIKozGLCT64b/mgkfQ8GH+NycIrdt05SzPUTO5a1B x4I3oRNrN7+lw4OX7aIQlDT6BnpHGbAUh1y//x2tDQ0NIjwNBHuZ+pzkA8qF+UDi5tiKu6fqN/3 +oDiBh64Lfu1fwsy2l62GjPC7c70J9AobNIwERvzEAoTPCzhE7YHWAoGJz5Qp5qw==
X-Google-Smtp-Source: AGHT+IGm0PSpGTvLq/6EyXXHtcKT+y43VgaukGHr/m5mpXye9Tk3EO7LD1C/cKAz+bC7ufVO5dLQkg==
X-Received: by 2002:a05:620a:40d3:b0:8b2:dada:29b4 with SMTP id af79cd13be357-8b338773acamr1417885a.63.1763654436995; Thu, 20 Nov 2025 08:00:36 -0800 (PST)
Received: from smtpclient.apple ([2600:4040:2527:300:dddc:40bb:4cab:42f8]) by smtp.gmail.com with ESMTPSA id af79cd13be357-8b32e82eb0dsm128180585a.5.2025.11.20.08.00.34 for <tls@ietf.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Nov 2025 08:00:35 -0800 (PST)
From: Sean Turner <sean@sn3rd.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81\))
Date: Thu, 20 Nov 2025 11:00:12 -0500
References: <176226681584.653856.6794193315450289971@dt-datatracker-5df8666cb-7l4w5> <0F7F84C2-558C-4265-91E3-A3EBFA520229@sn3rd.com>
To: TLS List <tls@ietf.org>
In-Reply-To: <0F7F84C2-558C-4265-91E3-A3EBFA520229@sn3rd.com>
Message-Id: <13C0BECD-DCEF-4E83-9901-0E9DAB585847@sn3rd.com>
X-Mailer: Apple Mail (2.3826.700.81)
Message-ID-Hash: EST4SCB2SDHXC26QUJWLBAJJ7UADJFGY
X-Message-ID-Hash: EST4SCB2SDHXC26QUJWLBAJJ7UADJFGY
X-MailFrom: sean@sn3rd.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-wkech-11 (Ends 2025-11-25)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/kkId_W_Y-ABNCwRoTuzpHEW7j1k>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Another reminder that this is still on-going.

spt

> On Nov 13, 2025, at 19:25, Sean Turner <sean@sn3rd.com> wrote:
> 
> Just a reminder that this is still on-going.
> 
> spt
> 
>> On Nov 4, 2025, at 23:33, Sean Turner via Datatracker <noreply@ietf.org> wrote:
>> 
>> 
>> Subject: WG Last Call: draft-ietf-tls-wkech-11 (Ends 2025-11-25)
>> 
>> This message starts a 3-week WG Last Call for this document.
>> 
>> Abstract:
>>  We define a well-known URI at which an HTTP origin can inform an
>>  authoritative DNS server, or other interested parties, about its
>>  Service Bindings.  Service binding data can include Encrypted
>>  ClientHello (ECH) configurations, that may change frequently.  This
>>  allows the HTTP origin, in collaboration with DNS infrastructure
>>  elements, to publish and rotate its own ECH keys.  Other service
>>  binding data such as information about TLS supported groups is
>>  unlikely to change quickly, but the HTTP origin is much more likely
>>  to have accurate information when changes do occur.  Service data
>>  published via this mechanism is typically available via an HTTPS or
>>  SVCB resource record.
>> 
>> File can be retrieved from:
>> https://datatracker.ietf.org/doc/draft-ietf-tls-wkech/
>> 
>> Please review and indicate your support or objection to proceed with the
>> publication of this document by replying to this email keeping tls@ietf.org
>> in copy. Objections should be motivated and suggestions to resolve them are
>> highly appreciated.
>> 
>> Authors, and WG participants in general, are reminded again of the
>> Intellectual Property Rights (IPR) disclosure obligations described in BCP 79
>> [1]. Appropriate IPR disclosures required for full conformance with the
>> provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of
>> any. Sanctions available for application to violators of IETF IPR Policy can
>> be found at [3].
>> 
>> Thank you.
>> 
>> [1] https://datatracker.ietf.org/doc/bcp78/
>> [2] https://datatracker.ietf.org/doc/bcp79/
>> [3] https://datatracker.ietf.org/doc/rfc6701/
>> 
>> 
>> 
>