允许机会性ech
Open
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 38.1k
- Forks
- 4.6k
- Avg merge
- 19d 15h
- Merged PRs (30d)
- 1
Description
现状：无法实现机会性ech。当tls.ech.enabled=true且tls.ech.config为空，如果没有得到有效的dns记录，连接无法建立。
功能：增加一个选项允许机会性ech，当tls.ech.enabled=true且tls.ech.config为空，如果没有得到有效的dns记录，允许在没有启用ech的情况下建立tls连接。
原因：机会性ech可以提供尽力而为的隐私保护，同时保证可用性。
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the handling for tls.ech.enabled and the empty tls.ech.config case, then trace how missing or invalid DNS ECH records currently prevent the TLS connection. Define the fallback at that entry point and inspect nearby tests, if present; done means the connection proceeds without ECH when no valid DNS configuration is obtained, while configured ECH behavior remains unchanged.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- networking, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 52/100