draft-ietf-tls-wkech
A well-known URI for publishing service parameters
We define a well-known URI at which an HTTP origin can inform an
authoritative DNS server, or other interested parties, about its
Service Bindings. Service binding data can include Encrypted
ClientHello (ECH) configurations, that may change frequently. This
allows the HTTP origin, in collaboration with DNS infrastructure
elements, to publish and rotate its own ECH keys. Other service
binding data such as information about TLS supported groups is
unlikely to change quickly, but the HTTP origin is much more likely
to have accurate information when changes do occur. Service data
published via this mechanism is typically available via an HTTPS or
SVCB resource record.