RFC 9848 - Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings
- Status: Proposed Standard
- Published: March 2026
- Stream: IETF
- Pages: 9
- Errata: No Errata
Abstract
To use TLS Encrypted ClientHello (ECH), the client needs to learn the ECH configuration for a server before attempting a connection. This specification conveys ECH configuration information via DNS, using a SVCB or HTTPS resource record (RR).
Related Resources
- Official Text: RFC 9848
- Official Page: RFC 9848 DataTracker
- Errata: RFC Editor Errata