IETF Logo Mail Archive

[TLS] Re: checking a bit of ECH behaviour

Stephen Farrell <stephen.farrell@cs.tcd.ie> Sat, 22 March 2025 23:32 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id B5FFB110A445 for <tls@mail2.ietf.org>; Sat, 22 Mar 2025 16:32:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kxFW4bCpfHRb for <tls@mail2.ietf.org>; Sat, 22 Mar 2025 16:32:43 -0700 (PDT)
Received: from EUR02-VI1-obe.outbound.protection.outlook.com (mail-vi1eur02on2136.outbound.protection.outlook.com [40.107.241.136]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 77A46110A43D for <tls@ietf.org>; Sat, 22 Mar 2025 16:32:43 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Yh5StsgYn678qRXzrzOcdYlFpKsg2BYEKXrgbPXXZoelfrSC/BZe9IcN+CxPgvFz0mjms9/KR5/1wuy0CuMONCnEg1ZhIaKNnT3QdaVmhd6xefm1efE6QikDRn8p6gHeBzOtqSd31wPf7sVw7NbWYWT+YIxZknoivvSYQiARtZzOP6b+VZqRY5rDUEMVFKlftMAeLtowi0w2pioN8bQU5w4qilfU2VvIl46KRwSM3cBSQ2Ra3KgAqbMDdf41T7lp29mTYCtk52GihA/8r+BSVKNgUfr84PzsQ95b9JxfVeIV9rBlwGfhZJN3P21CjdLEGHLDSbyrHup3FPAzYmxfbA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=GfklvRe3uhHT3TjyrHNmtNsLlll2VWiV6j3MBsNSx4w=; b=TVdQZ8g03v4VZz3oGeV0kyJEsDiK0ByaxFAyA4FOrvK3nLodQvySKPR4+30/Sd29TBvJB7QMarxXS2fJpqrslxcnV6DZNXg8+Fm2WYZRa5i07S7fIRTqule5K5PM9ckYqBm67airZ5eTbOpwpm0Odpj714YaxeqBfigHbwW+hDR3yP6WbZiqbjnruaJZDtSNWE7pWQ5cQ0RX+tFqCuzo4bDdDSCqVNNRXnOH1RAYWeAvvmsOrvARJc0L9UB7mibpAa9ISpKT2dGmqMjuapHfWzwnq835ILir0PAG5IYukdvldavkUuJK5kYGIkwQnuJsHXVE/gJgY+wuQ9pg9UfD0g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GfklvRe3uhHT3TjyrHNmtNsLlll2VWiV6j3MBsNSx4w=; b=enDtuuwj0aNiO6rhJhIwqg8TnH3yTZbNI5NvbHvy91QFAEzzJxiunpxl4kqaKiwFkdJVHoCAmhEdUa74T0/PQahZPuxlihkzxuoJ3CXOiU9NUGiWw4FPiD5F21kVB+sezgP12hT1qlCUiUvbVto6aGfjAPvAEd7WJq+CWNxuGEHKXJObzS+EkrzVfXwWFWV8ZRhbzdiFyMOvyZ/YOGBeUqsnOhyucrD7ZSMFa6j+ZI0m2SDx5oCP7HDbrwkMM9QzQCp3Vrg25i+7j20y2ufoH9vhXxNMu+ZovmwtEzPdG+G/7QvCeHQlIox4rtqnRoDJxX+ZBPtQ4qPsUFD1Ww/m/g==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from AM7PR02MB5944.eurprd02.prod.outlook.com (2603:10a6:20b:10e::23) by GV1PR02MB8353.eurprd02.prod.outlook.com (2603:10a6:150:54::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8534.42; Sat, 22 Mar 2025 23:32:38 +0000
Received: from AM7PR02MB5944.eurprd02.prod.outlook.com ([fe80::567f:ad68:82d2:fd7c]) by AM7PR02MB5944.eurprd02.prod.outlook.com ([fe80::567f:ad68:82d2:fd7c%4]) with mapi id 15.20.8534.036; Sat, 22 Mar 2025 23:32:38 +0000
Message-ID: <a10cf24c-6bb9-4846-b562-b176807ca27a@cs.tcd.ie>
Date: Sat, 22 Mar 2025 23:32:36 +0000
User-Agent: Mozilla Thunderbird
To: David Benjamin <davidben@chromium.org>
References: <179d3e25-6ff2-4557-af5c-ad64aaab43b0@cs.tcd.ie> <CAF8qwaDGWdXAJj2k=wOjJ7eqz9++60W+PkWucDNdP653boBB9Q@mail.gmail.com>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <CAF8qwaDGWdXAJj2k=wOjJ7eqz9++60W+PkWucDNdP653boBB9Q@mail.gmail.com>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------6ipCSVIL0zfJI0z1wWtGtkHs"
X-ClientProxiedBy: DUZPR01CA0051.eurprd01.prod.exchangelabs.com (2603:10a6:10:469::15) To AM7PR02MB5944.eurprd02.prod.outlook.com (2603:10a6:20b:10e::23)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AM7PR02MB5944:EE_|GV1PR02MB8353:EE_
X-MS-Office365-Filtering-Correlation-Id: b871d079-f103-4be9-4e64-08dd6999d49e
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|10070799003|366016|376014;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR02MB5944.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(10070799003)(366016)(376014);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 9zPdP0m2quneQJZOLmauqL/Z0Npuc1Ft/h0S/KgF7M3+W1Tm1oF2Qq0wulIW6OZqOty1YBjl7xn0xHvYcyXRey5tUXGoykxocgknwWtAldI2uoZQRhpl5BbdAJWJ4+631gz0Wu629irhFkk6tnv+FAh9V8yH8vQU0qBrJSRLo582K3lZt+YHuEb8za982ljKYbLFJ6PtPCyxfEgfgOWqpKj3E3oBs29kS3n46DyUPZ/Zt661/s39yxwg1rfGq7HRfs2v5FHXYDw56/jKVqIxUxSVRlNiivUu/qbb53KJeSAPSSrtA+Q378mFP6mZCtIzkyd8xGXETgczFHXKUFz8hGqV5sswQGfrB5NbzBMfxc18TFUjJthAMjFka1X1mVV1lsxdVtdXpDTpG8EH7zpspYWS1l919auzfaroqj4ec+K0oRORXnHzIZdFyet22bQVrrQdxT4A21vu2H0W/PqJXv4K/BoT+ashw5Nbo3u5G4aAoPHXMr5aakgsf1aGeJNDHgeaDHdmcxoWwzh+JpfLYuA0GkZ1fjpJI+JMVaGPK5+DygwU5R8WBYrVk8wNlw8FeD+RO67GPDnwu0SRMHyIq5q0JiK0el5XZ30JOIQ2VguCnqI/I2DKh4zPEf17zqdNkWirqr3RnZtLyRiZnnMMEAd9BtT7hHr3iosCOV+ToU+O3oBYLAdBHpVVYjYeYCzsMRqKkaZjGwRs0tMlxRSSICOb6u7EMQhrB2ZrpInz9paYf4H1Ch+0zeRlOdQADwKMQdL78S60kcKeuj0sax5Lt8by3I3YxytjSB4hVhs06usYbCXDGV7KOziyhFQzRqgQmjaU/RJmXAB0wxt0v14MUXt1k788V5qET+v3+TC7UD5Fv7vwW8gUcU8AfeW4aEE9gxgGH0FPhUpjr1Ru/4NqiZLlCOd23C+Qq1DC9fQlsUnMGR0sVR7oKnKL/wvQ8W+S1C0v/o7FY5fMDlh8CHDP4n4Wsn2V7f9qKbPPsr7jbs31FCc7iFDdIXoT2PN/plXygXjQXRsogni3EgY5R9SQCF2gzSYs7uRvn4mDczmergy560W/sVspXAZethIPTvRqJPBE9c8MuNQ1F2MnxZw32vZZYuHnMtHOaZ6pL7Fgm/BuJGWq/rtv0ynYiz4YMS5e4MK8eJBVnfgF1BR3ADS4zuVYnupzvVdJXjRrJVgbMLJ2w3uyWBLxWyWwdD2Mww/CZklfAzb02YX2ygW/5MCOP9xSPyqJ0HPkWjy/x0T81j4E11Wwmk2i81/E2YCT3r11RV9ibEC1QWs2WhuPo9TYKX9QmChijVezvwofKbXJ/cZnF9eXjdVK4UsEz9mmBAjRp2XNCXUFZG15Yrp8kaO3910b2MI0PRy61FI9F5/mnzwkoyzKG6vn+6AkvqMfCSzerDv0jA8Oo4irx45BkZhM8OqHl3Pvp7zqxJSEcwlYosHb778SiVQsULTLBqOBPF0iETcy8ljEeST4Nl95okRmfIiOJk4gZ394RglgXc0ZF44UNx6463ouktoUxPLgkZKHU80sUSG+dy5udDmx5CO53MwaVZrRZzE+UutLQECzQrm22QBONf0xYDCFmRNQrfffdRshWOfABpNtKtqRPNSBfebpD/Ig+XaFlrf1DnDM4FqryLENRhzBTp1H35fYMLlm
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: b871d079-f103-4be9-4e64-08dd6999d49e
X-MS-Exchange-CrossTenant-AuthSource: AM7PR02MB5944.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Mar 2025 23:32:38.2120 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: fIgmJf5J8hv2Wf6kqRqu5tPtmZJ617FM2zMdrTNkJLmkXAIA/qg74FARTAF0mb6s
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR02MB8353
Message-ID-Hash: THFBREOGEJVZIA2DBF7JSNUBCLFAPOES
X-Message-ID-Hash: THFBREOGEJVZIA2DBF7JSNUBCLFAPOES
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tls@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: checking a bit of ECH behaviour
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/xrz4ljfELDlHA6SfXdemPuBOWfw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hiya,

On 22/03/2025 23:20, David Benjamin wrote:
> 
> To that end, the proposed protocol change wouldn't work in the first place.

It wasn't a proposed change, I was just checking if some corner-case
code was right or wrong, and as you point out above, it's wrong, or
rather, even if that code copies the proposed retry-configs, the h/s
will fail as the sides are using different transcripts.

 > I remember we discussed all this

I, clearly, did not:-)

Thanks,
S.

v2.46.0 | Report a Bug | By Email | System Status