draft-ietf-tls-wkech

A well-known URI for publishing service parameters

streamIETF grouptls stateactive pages21 rev12 expires2026-11-04 canonicalhttps://datatracker.ietf.org/doc/draft-ietf-tls-wkech/
We define a well-known URI at which an HTTP origin can inform an authoritative DNS server, or other interested parties, about its Service Bindings. Service binding data can include Encrypted ClientHello (ECH) configurations, that may change frequently. This allows the HTTP origin, in collaboration with DNS infrastructure elements, to publish and rotate its own ECH keys. Other service binding data such as information about TLS supported groups is unlikely to change quickly, but the HTTP origin is much more likely to have accurate information when changes do occur. Service data published via this mechanism is typically available via an HTTPS or SVCB resource record.