[TLS] Tsvart last call review of draft-ietf-tls-esni-23

2025-03-05 Thread Tommy Pauly via Datatracker
Reviewer: Tommy Pauly Review result: Ready This document has been reviewed as part of the transport area review team's ongoing effort to review key IETF documents. These comments were written primarily for the transport area directors, but are copied to the document's authors and WG to allow them

[TLS] Re: Reminder: Mail List Procedures

2025-03-05 Thread Sean Turner
> On Mar 1, 2025, at 12:57 PM, Muhammad Usama Sardar > wrote: > > On 01.03.25 06:27, Sean Turner wrote: > >> • Discussion of subjects unrelated to IETF policy, meetings, activities, or >> technical concerns (from RFC 3683) > > Could the chairs please clarify about the announcement of side m

[TLS] Secdir last call review of draft-ietf-tls-esni-23

2025-03-05 Thread Adam Montville via Datatracker
Reviewer: Adam Montville Review result: Ready Based on my review of this draft I would classify it as "ready" for publication, with some minor caveats that don’t fundamentally undermine its readiness.The draft defines a clear, well-specified mechanism for encrypting the ClientHello. It leverages e

[TLS] Re: Implicit ECH Config for TLS 1.3 – addressing public_name fingerprinting

2025-03-05 Thread Christopher Patton
Hi Nick, I'd go for option 1. The server is opting into this mechanism, so it seems reasonable to force it to ignore the outer SNI if ECH accepts. I agree with Stephen that we shouldn't hold up publication for this change (Option 2), however I think the extension mechanism of ECH is appropriate fo