RS

Here is a small Python program that will print the DNS HTTPS-RR data for Cloudflare's expermental -09 server. It requires dnspython 2.1.0 or higher. https://pypi.org/project/dnspython/ ```python3 #!/usr/bin/env python3 import dns.resolver...

An update here: Cloudflare has updated their server to draft-10, which looks good in most respects. The WG is still thrashing on ECH and HRR interactions, so I don't expect...

I worked on this a little bit. I have the draft -14 config working (only needed to change some data types). This example manages to pull down an `ECHConfig` from...

I removed the minimal-versions check temporarily, since that error is being caused by the "hpke" crate. I don't plan to leave that dependency in the end, but I want to...

> @sayrer Are you wanting feedback on this? Not sure what your intent is RE the "WIP:" prefix. No, not yet. In particular, the `ech_key.rs` file is just for bootstrapping...

I switched this to hpke-rs for now. It's a bit easier to use since it uses the enum-heavy style that Rustls does. The hpke crate worked fine, but I would've...

I'm a little mystified by this Catalina test failure. It passes here on Big Sur, and also seems to pass on Linux (looking through the logs).

This latest patch is only failing on code coverage metrics. I am not sure what's going on with the macOS tests--I think I'll wait it out since they pass on...

Looks like the GitHub CI machines are pretty old--they don't have AES-NI and/or AVX instructions, which Evercrypt requires.

> > Looks like the GitHub CI machines are pretty old--they don't have AES-NI and/or AVX instructions, which Evercrypt requires. > > I believe M1 Macs don't have AVX either...