TLS Encrypted Client Hello (ECH) for XMPP

Hi,

I'd like to check if anyone explored the idea of implementing ECH [0] 
for XMPP? The rationale would be to hide the last bits that are sent 
plaintext when connecting: hostname (SNI) and protocols (ALPN).

I'm aware that this is not simple, would require close collaboration of 
client and server developers and there's a large potential for 
bikeshedding (e.g. whether to use SVBC records [1] or Host Meta 2 [2]) 
but the only resource I found on this topic [3] ended without a clear 
conclusion.

 From the practical point of view it seems that ECH will be available 
soon in OpenSSL and some web servers already implement that [4] [5].

Thanks for your time!

Kind regards,
Wiktor

[0]: https://www.rfc-editor.org/rfc/rfc9849.html

[1]: https://www.rfc-editor.org/rfc/rfc9460

[2]: https://xmpp.org/extensions/xep-0487.html

[3]: 
https://mail.jabber.org/hyperkitty/list/[email protected]/thread/6WSGNTADZ6YQTHXGECGGM53TSLW5N265/#QBGQCKWK6H5I7WIS5LJKY7FSISHTCUE6

[4]: https://github.com/nginx/nginx/pull/840

[5]: https://github.com/haproxy/haproxy/issues/1924

_______________________________________________
Standards mailing list -- [email protected]
To unsubscribe send an email to [email protected]