google / google/conscrypt

Encrypted ClientHello (ECH)

Open
#730 22 comments 8 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
1.4k
Forks
326
Avg merge
16h 22m
Merged PRs (30d)
17

Description

It would be great to have support for TLS Encrypted SNI (ESNI) in Conscrypt, so Android apps can include Conscrypt to get TLSv1.3 and ESNI support. Work is already underway in boringssl and openssl to support ESNI, so it should be relatively straightforward

I'm working with others on implementing Encrypted SNI on services used on Android. ESNI is up to draft4 in the IETF process, so now is a good time to start implementing in order to provide feedback to the IETF process. We're wondering how much interest there is here in TLSv1.3 Encrypt SNI extension that is currently an IETF draft implemented by Firefox, Cloudflare, and others. We could potentially submit code to make Conscrypt support ESNI. We are currently working on getting ESNI implemented in openssl, curl, and lighttpd.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.