[TLS] ESNI interoperability questions

2019-10-26 Thread Rob Sayre
Hi, I think I have a working ESNI client, but I'm encountering a strange error testing with Cloudflare. I initially tested with "cloudflare.com", but found this was a bad idea, because that host doesn't seem to require an SNI or ESNI. So, a bogus ESNI triggered no errors. When my client sends an

[TLS] Weekly github digest (TLS Working Group Drafts)

2019-10-26 Thread Github Notifications
Issues -- * tlswg/draft-ietf-tls-esni (+2/-0/💬8) 2 issues created: - AEAD-Encrypt definition (by sayrer) https://github.com/tlswg/draft-ietf-tls-esni/issues/189 - "HKDF-Extract(0, Z)" (by sayrer) https://github.com/tlswg/draft-ietf-tls-esni/issues/188 1 issues received 8 new c

Re: [TLS] ESNI interoperability questions

2019-10-26 Thread Rob Sayre
As an update, I seem to be able to negotiate a handshake with "only.esni.defo.ie", but I must be making a mistake in my ClientHello. Wireshark sees Firefox's ClientHello as TLS 1.3, but mine only shows up as TLS 1.0, although the " only.esni.defo.ie" ServerHello does show up as TLS 1.3. You check