News for hackers. Stuff that matters.
Re:Show HN: My Book Bulletproof TLS and PKI (Second Edition)... by tialaramex on Wednesday March 02, 2022 @02:11PM (#30531460)
(Not Ivan)

Encrypted Client Hello is still named Encrypted Client Hello, as of https://www.ietf.org/archive/id/draft-ietf-tls-esni-14.txt

It's not really true that "it keeps getting renamed" the original intent in ekr's draft was to encrypt SNI, but then the question is why not encrypt other things in the client hello, and if you're going to then why not encrypt the entire client hello?

There isn't really room for further scope increase, the server hello was already encrypted in TLS 1.3 anyway.

There are no comments on this comment yet.