You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@trafficserver.apache.org by Hans-Christoph Steiner <ha...@guardianproject.info> on 2019/09/11 14:33:55 UTC
implementing TLSv1.3's Encrypted SNI
Hey all,
I'm working with Stephen Farrell who is part of the IETF TLS Working
Group, with a current focus on ESNI. We're wondering how much interest
there is here in TLSv1.3 Encrypt SNI extension that is currently an IETF
draft implemented by Firefox, Cloudflare, and others. We could
potentially submit code to make trafficserver support ESNI. We are
currently working on getting ESNI implemented in openssl.
More info and test servers are here: https://defo.ie/
.hc
--
PGP fingerprint: EE66 20C7 136B 0D2C 456C 0A4D E9E2 8DEA 00AA 5556
https://pgp.mit.edu/pks/lookup?op=vindex&search=0xE9E28DEA00AA5556
Re: implementing TLSv1.3's Encrypted SNI
Posted by Leif Hedstrom <zw...@apache.org>.
> On Sep 12, 2019, at 10:28 AM, Bryan Call <bc...@apache.org> wrote:
>
> I am interested in ESNI and I think it would be a great feature to have in ATS. I would be willing to test changes in a production environment.
Yeh, I think this would be of wide interest for the general ATS community.
— Leif
>
> -Bryan
>
>
>> On Sep 11, 2019, at 7:33 AM, Hans-Christoph Steiner <ha...@guardianproject.info> wrote:
>>
>>
>> Hey all,
>>
>> I'm working with Stephen Farrell who is part of the IETF TLS Working
>> Group, with a current focus on ESNI. We're wondering how much interest
>> there is here in TLSv1.3 Encrypt SNI extension that is currently an IETF
>> draft implemented by Firefox, Cloudflare, and others. We could
>> potentially submit code to make trafficserver support ESNI. We are
>> currently working on getting ESNI implemented in openssl.
>>
>> More info and test servers are here: https://defo.ie/
>>
>> .hc
>>
>> --
>> PGP fingerprint: EE66 20C7 136B 0D2C 456C 0A4D E9E2 8DEA 00AA 5556
>> https://pgp.mit.edu/pks/lookup?op=vindex&search=0xE9E28DEA00AA5556
>
Re: implementing TLSv1.3's Encrypted SNI
Posted by Bryan Call <bc...@apache.org>.
I am interested in ESNI and I think it would be a great feature to have in ATS. I would be willing to test changes in a production environment.
-Bryan
> On Sep 11, 2019, at 7:33 AM, Hans-Christoph Steiner <ha...@guardianproject.info> wrote:
>
>
> Hey all,
>
> I'm working with Stephen Farrell who is part of the IETF TLS Working
> Group, with a current focus on ESNI. We're wondering how much interest
> there is here in TLSv1.3 Encrypt SNI extension that is currently an IETF
> draft implemented by Firefox, Cloudflare, and others. We could
> potentially submit code to make trafficserver support ESNI. We are
> currently working on getting ESNI implemented in openssl.
>
> More info and test servers are here: https://defo.ie/
>
> .hc
>
> --
> PGP fingerprint: EE66 20C7 136B 0D2C 456C 0A4D E9E2 8DEA 00AA 5556
> https://pgp.mit.edu/pks/lookup?op=vindex&search=0xE9E28DEA00AA5556