5 ms·
Indeed. It seems header encryption would be a good start. David Benjamin has proposed the GREASE protocol, but I think that is only for servers, not middleboxes
by Moodles 9y ago
Indeed. It seems header encryption would be a good start. David Benjamin has proposed the GREASE protocol, but I think that is only for servers, not middleboxes.
- baby 9y agoGREASE only fuzzes some of the fields in TLS 1.3 handshake messages, to prevent middleboxes and TLS servers to incorrectly behave towards unknown values for extensions and other various fields. That doesn't help outside of TLS 1.3.
- Moodles 9y agoIndeed: it would be nice to see these techniques applied in more contexts.