Hi Opsec WG
We’re looking forward to talking about the operational considerations of 
Encrypted Client Hello at the working group meeting on Thursday.  In the 
meantime, you may be interested to note that we have just updated the I-D to 
version -05, which is accessible at 
https://datatracker.ietf.org/doc/draft-campling-ech-deployment-considerations/.

Andrew

From: Warren Kumari <[email protected]>
Sent: 07 March 2023 22:22
To: Andrew Campling <[email protected]>
Cc: [email protected]
Subject: Re: [OPSEC] Operational Security Considerations and Encrypted Client 
Hello

Hello WG!

I'd encourage the WG to review this document - it's relatively short, and is an 
easy read.

ECH is likely to be a fairly active topic in the IETF, and has significant 
Opsec implications. The document is on the OpSec agenda, and so having read it 
before the meeting will be really helpful..

W



On Fri, Feb 17, 2023 at 8:15 AM, Andrew Campling 
<[email protected]<mailto:[email protected]>> wrote:
Hi Opsec wg
You may be aware that some of us have been looking at the potential impact of 
the deployment of Encrypted Client Hello (ECH), an extension to TLS1.3+.  We 
are continuing to develop the draft, which is accessible at 
https://datatracker.ietf.org/doc/draft-campling-ech-deployment-considerations/. 
 You will note that many of the issues that we have identified relate to 
various aspects of operational security in a variety of contexts.

We have been encouraged to share the draft with the Opsec working group to see 
if there is interest in the topic within the group, hence this post.  I and at 
least one of my co-authors will be present in Yokohama for the IETF 116 meeting 
and will be happy to present the highlights of the draft if time is available 
on the wg agenda.


Andrew

_______________________________________________
OPSEC mailing list
[email protected]<mailto:[email protected]>
https://www.ietf.org/mailman/listinfo/opsec

_______________________________________________
OPSEC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsec

Reply via email to