On Tue, Mar 19, 2024 at 12:41 AM Bas Westerbaan <bas=
40cloudflare....@dmarc.ietf.org> wrote:

> Hi Scott,
>
> I generally agree with David, in particular that the keyshare prediction
> draft is the way forward.
>

Hi,

David did not like this idea, but it's also possible to bake this
preference into ECH. If your ECHConfig requires a certain keyshare,
say X25519+Kyber, then you can enforce this choice.* This way is more
brittle for sure, but you can enforce the requirement.

thanks,
Rob

*
https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni#config-extensions-guidance
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to