Hi Rob, let me look into it.

Chris P.

On Fri, May 28, 2021 at 11:36 AM Rob Sayre <say...@gmail.com> wrote:

> On Mon, Apr 5, 2021 at 10:02 AM Christopher Patton <cpatton=
> 40cloudflare....@dmarc.ietf.org> wrote:
>
>> Hi list, just FYI that Cloudflare's test server is upgrading to
>> draft-ietf-tls-esni-10 this morning. It should finish rolling out in a few
>> hours. Note that we've dropped support for draft-ietf-tls-esni-09.
>>
>> The endpoint is https://crypto.cloudflare.com. You'll also find our ECH
>> config in the HTTPS resource record.
>>
>
> I've gotten a Rustls client to interoperate with this server, but I had
> some trouble triggering HRR, since Rustls always sends a key-exchange group
> in TLS 1.3. I managed to hack up a ClientHello and handshake with no
> initial key-exchange group, but perhaps it could be easier.
>
> It might be nice to have this server reject secp384r1 and offer X25519 in
> an HRR, or something like that.
>
> thanks,
> Rob
>
>
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to