1654332 - Implement Encrypted Client Hello in NSS

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement, P3)

Description

[Kevin Jacobs [:kjacobs]]

Tracking ECH implementation in NSS.

Comment 1

[Kevin Jacobs [:kjacobs]]

Attachment: Bug 1654332 - Update ESNI to draft-08 (ECH).

Depends on D73947

Comment 2

[Kevin Jacobs [:kjacobs]]

Attachment: Bug 1654332 - Buffered ClientHello construction.

Comment 3

[Kevin Jacobs [:kjacobs]]

Attachment: Bug 1654332 - Fixup a10493dcfcc9: copy ECHConfig.config_id with socket

A late review change for ECH was for the server to compute each ECHConfig config_id when set to the socket, rather than on each connection. This works, but now we also need to copy that config_id when copying a socket, else the server won't find a matching ECHConfig to use for decryption.

Comment 4

[Kevin Jacobs [:kjacobs]]

https://hg.mozilla.org/projects/nss/rev/d40121ba59ba02c45fd2736f6e096b3b464916a9
https://hg.mozilla.org/projects/nss/rev/a10493dcfcc92cb9bad985b151325238b6e38b09
https://hg.mozilla.org/projects/nss/rev/3eacb92e9adf0e250eca309690c3f9a8a257da3b

Will open new bugs for -09.

Comment 5

[Leo_sk]

(In reply to Kevin Jacobs [:kjacobs] from comment #4)

Will open new bugs for -09.

Is any new bug opened? Can't find any by searching

Comment 6

[Kevin Jacobs [:kjacobs]]

(In reply to Leo_sk from comment #5)

(In reply to Kevin Jacobs [:kjacobs] from comment #4)

Will open new bugs for -09.

Is any new bug opened? Can't find any by searching

-09 is not finalized yet, but I've opened bug 1681585 to track this.