Subject: [TLS] Weekly github digest (TLS Working Group Drafts)

From: Repository Activity Summary Bot <[email-masked]>
Date: Sun, 4 Apr 2021 03:43:19 -0400 (EDT)

Issues
------
* tlswg/draft-ietf-tls-esni (+2/-0/💬48)
  2 issues created:
  - Editorial: Describe ECH chronologically rather than all client behavior then all server behavior (by cbartle891)
    https://github.com/tlswg/draft-ietf-tls-esni/issues/412 
  - Early data and ClientHelloOuter interaction (by davidben)
    https://github.com/tlswg/draft-ietf-tls-esni/issues/408 

  7 issues received 48 new comments:
  - #412 Editorial: Describe ECH chronologically rather than all client behavior then all server behavior (1 by dmcardle)
    https://github.com/tlswg/draft-ietf-tls-esni/issues/412 
  - #408 Early data and ClientHelloOuter interaction (8 by cbartle891, chris-wood, davidben)
    https://github.com/tlswg/draft-ietf-tls-esni/issues/408 
  - #405 public_name edge cases and client checks (23 by bemasc, cbartle891, chris-wood, davidben, dmcardle, richsalz, sftcd)
    https://github.com/tlswg/draft-ietf-tls-esni/issues/405 
  - #403 public_name and maximum_name_length could be smaller (4 by cbartle891, davidben, dmcardle)
    https://github.com/tlswg/draft-ietf-tls-esni/issues/403 
  - #402 Not all of CHOuter is authenticated (4 by cbartle891, chris-wood, davidben)
    https://github.com/tlswg/draft-ietf-tls-esni/issues/402 
  - #399 The serverhello.random trick is ugly and might interact with ticket handling... (3 by cjpatton, davidben, martinthomson)
    https://github.com/tlswg/draft-ietf-tls-esni/issues/399 
  - #397 Including the client's ephemeral public key in the AAD precludes use of a single-shot HPKE API (5 by chris-wood, davidben, sftcd)
    https://github.com/tlswg/draft-ietf-tls-esni/issues/397 

Pull requests
-------------
* tlswg/draft-ietf-tls-esni (+6/-0/💬22)
  6 pull requests submitted:
  - Mirror early_data in ClientHelloOuter when applicable. (by chris-wood)
    https://github.com/tlswg/draft-ietf-tls-esni/pull/415 
  - Allow clients send a dummy PSK in ClientHelloOuter (by cjpatton)
    https://github.com/tlswg/draft-ietf-tls-esni/pull/414 
  - Add SHOULD for clients to validate public_name as a DNS hostname. (by dmcardle)
    https://github.com/tlswg/draft-ietf-tls-esni/pull/413 
  - Validate the contents of ClientHelloInner. (by chris-wood)
    https://github.com/tlswg/draft-ietf-tls-esni/pull/411 
  - Authenticate ClientECH extension position in ClientHelloOuterAAD. (by chris-wood)
    https://github.com/tlswg/draft-ietf-tls-esni/pull/410 
  - Compress ECHConfigContents. (by chris-wood)
    https://github.com/tlswg/draft-ietf-tls-esni/pull/409 

  2 pull requests received 22 new comments:
  - #413 Add MUST for clients to validate ECHConfig.contents.public_name. (21 by bemasc, cbartle891, chris-wood, davidben, dmcardle, richsalz, sftcd)
    https://github.com/tlswg/draft-ietf-tls-esni/pull/413 
  - #410 Authenticate ClientECH extension position in ClientHelloOuterAAD. (1 by martinthomson)
    https://github.com/tlswg/draft-ietf-tls-esni/pull/410 

* tlswg/dtls-conn-id (+0/-0/💬1)
  1 pull requests received 1 new comments:
  - #96 zero-length CID clarification (1 by boaks)
    https://github.com/tlswg/dtls-conn-id/pull/96 

* tlswg/tls-subcerts (+1/-0/💬0)
  1 pull requests submitted:
  - Correct text describing valid_time (by lukevalenta)
    https://github.com/tlswg/tls-subcerts/pull/83 

Repositories tracked by this digest:
-----------------------------------
* https://github.com/tlswg/draft-ietf-tls-semistatic-dh
* https://github.com/tlswg/draft-ietf-tls-md5-sha1-deprecate
* https://github.com/tlswg/draft-ietf-tls-esni
* https://github.com/tlswg/certificate-compression
* https://github.com/tlswg/draft-ietf-tls-external-psk-importer
* https://github.com/tlswg/draft-ietf-tls-ticketrequest
* https://github.com/tlswg/tls13-spec
* https://github.com/tlswg/tls-flags
* https://github.com/tlswg/dtls13-spec
* https://github.com/tlswg/dtls-conn-id
* https://github.com/tlswg/tls-subcerts
* https://github.com/tlswg/oldversions-deprecate
* https://github.com/tlswg/sniencryption
* https://github.com/tlswg/tls-exported-authenticator
* https://github.com/tlswg/draft-ietf-tls-ctls
* https://github.com/tlswg/external-psk-design-team