%% You should probably cite rfc8165 instead of this I-D. @techreport{hardie-privsec-metadata-insertion-08, number = {draft-hardie-privsec-metadata-insertion-08}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-hardie-privsec-metadata-insertion/08/}, author = {Ted Hardie}, title = {{Design Considerations for Metadata Insertion}}, pagetotal = 7, year = 2017, month = mar, day = 27, abstract = {The IAB published RFC 7624 in response to several revelations of pervasive attacks on Internet communications. This document considers the implications of protocol designs that associate metadata with encrypted flows. In particular, it asserts that designs that share metadata only by explicit actions at the host are preferable to designs in which middleboxes insert metadata.}, }