Hi Rob,

> Are there OpenSSL / NSS / etc implementations others can work from?
> Probably the best way to lock this in and ship is to write the code.
>

There are three implementations I'm aware of, all works in progress:

   1. Cloudflare's prototype (written by me):
   https://github.com/cloudflare/go/pull/30
   2. boringSSL: https://bugs.chromium.org/p/boringssl/issues/detail?id=275
   3. NSS: https://bugzilla.mozilla.org/show_bug.cgi?id=1654332

The first (1.) is nearly complete and undergoing review.

Best,
Chris P

On Mon, Sep 28, 2020 at 7:58 PM Rob Sayre <say...@gmail.com> wrote:

> On Mon, Sep 28, 2020 at 12:55 PM Stephen Farrell <
> stephen.farr...@cs.tcd.ie> wrote:
>
>>
>> Hiya,
>>
>> Today I read over the diff between the latest ESNI/ECH
>> version and draft-07. [1] I have the following comments:
>>
>> 1. The volume of discussion on github is a deterrent. (*)
>>
>
> I agree the churn has seemed surprisingly heavy. The changes look
> well-meaning, but I don't really see a plan.
>
> Are there OpenSSL / NSS / etc implementations others can work from?
> Probably the best way to lock this in and ship is to write the code.
>
> thanks,
> Rob
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to