Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days
by simiones on Tuesday April 15, 2025 @04:17PM
(#43697872)
TCP SYN is not encrypted, and neither is Client Hello. Even with TCP cookies and TLS session resumption, the initial packet is still unencrypted, and can be intercepted.
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days
by haiku2077 on Tuesday April 15, 2025 @07:25PM
(#43699628)
Client Hello can be encrypted: https://support.mozilla.org/en-US/kb/understand-encrypted-cl...
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days
by EE84M3i on Tuesday April 15, 2025 @07:56PM
(#43699846)
Yes but this still depends on identity. It's not unauthenticated.
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days
by ekr____ on Wednesday April 16, 2025 @01:52PM
(#43708386)
The situation is actually somewhat more complicated than this.
ECH gets the key from the DNS, and there's no real authentication for this data (DNSSEC is rare and is not checked by the browser). See S 10.2 [0] for why this is reasonable.
[0] https://tlswg.org/draft-ietf-tls-esni/draft-ietf-tls-esni.ht...
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days
by simiones on Wednesday April 16, 2025 @08:36AM
(#43704625)
Oh, right, thanks for the correction!
However, ECH relies on a trusted 3rd party to provide the key of the server you are intending to talk to. So, it won't work if you have no way of authenticating the server beforehand the way GP was thinking about.
Not "never", because of HSTS preload, and browsers slowly adding scary warnings to plaintext connections.
https://preview.redd.it/1l4h9e72vp981.jpg?width=640&crop=sma...