RFC 9849: TLS Encrypted Client Hello

This document describes a mechanism in Transport Layer Security (TLS) for encrypting a message under a server public key.

Read RFC 9849 on the RFC Editor

Outgoing relationships (24 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 8126: Guidelines for Writing an IANA Considerations Section in RFCs
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Normative reference — RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3
Normative reference — RFC 9460: Service Binding and Parameter Specification via the DNS (SVCB and HTTPS Resource Records)
Normative reference — RFC 9180: Hybrid Public Key Encryption
Normative reference — RFC 9525: Service Identity in TLS
Normative reference — RFC 7918: Transport Layer Security (TLS) False Start
Normative reference — RFC 9847: IANA Registry Updates for TLS and DTLS
Informative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Informative reference — RFC 3552: Guidelines for Writing RFC Text on Security Considerations
Informative reference — RFC 7858: Specification for DNS over Transport Layer Security (TLS)
Informative reference — RFC 8484: DNS Queries over HTTPS (DoH)
Informative reference — RFC 5077: Transport Layer Security (TLS) Session Resumption without Server-Side State
Informative reference — RFC 7301: Transport Layer Security (TLS) Application-Layer Protocol Negotiation Extension
Informative reference — RFC 9499: DNS Terminology
Informative reference — RFC 9250: DNS over Dedicated QUIC Connections
Informative reference — RFC 8094: DNS over Datagram Transport Layer Security (DTLS)
Informative reference — RFC 7924: Transport Layer Security (TLS) Cached Information Extension
Informative reference — RFC 8701: Applying Generate Random Extensions And Sustain Extensibility (GREASE) to TLS Extensibility
Informative reference — RFC 8744: Issues and Requirements for Server Name Identification (SNI) Encryption in TLS
Informative reference — RFC 9848: Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings

Incoming relationships (2 related RFCs)

Normatively referenced by — RFC 9848: Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings
Normatively referenced by — RFC 9934: Privacy-Enhanced Mail (PEM) File Format for Encrypted ClientHello (ECH)