In general, the first time I heard it, I was very happy that Clienthello Tls messages will be fully encrypted inside the QUIC protocol, since this is a big leap forward in privacy. That there is no need for ESNI, but yesterday I saw this article(Title: Parsing QUIC Client Hellos) on the Chronium project, it is written about parsing ClientHellos, or I misunderstood something, or they mean decrypting ClientHellos already on the server side and not by a person in the middle. There's a draft reference about encrypting standart, but I as far as I understand it still depends on DNS. Can you correct me? Thanks.
-
"... I was very happy that Clienthello Tls messages will be fully encrypted inside the QUIC protocol ..." - I'm not sure what you've heard or read, but it was wrong or you've interpreted it wrongly. Apart from that - such questions are more on-topic at Information Security.– Steffen UllrichDec 20, 2020 at 16:50
Add a comment
|
1 Answer
ClientHello
messages are encrypted in QUIC, but the keys are published in the QUIC specification and so the Initial packets are easily decrypted.
-
That's a different question! I may answer it if you accept my answer to the original.– DmitriJan 14, 2021 at 20:15
-
If you'll answer all of questions then :). Btw it's done. I read about new extension to TLS 1.3 Encrypted Client Hello which should fix this issue. blog.cloudflare.com/encrypted-client-hello Yes what's the point if QUIC keys can be decrypted? Jan 16, 2021 at 15:59
-