%% You should probably cite rfc8744 instead of this I-D. @techreport{ietf-tls-sni-encryption-09, number = {draft-ietf-tls-sni-encryption-09}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-tls-sni-encryption/09/}, author = {Christian Huitema and Eric Rescorla}, title = {{Issues and Requirements for Server Name Identification (SNI) Encryption in TLS}}, pagetotal = 13, year = 2019, month = oct, day = 28, abstract = {This document describes the general problem of encrypting the Server Name Identification (SNI) TLS parameter. The proposed solutions hide a hidden service behind a fronting service, only disclosing the SNI of the fronting service to external observers. This document lists known attacks against SNI encryption, discusses the current "HTTP co-tenancy" solution, and presents requirements for future TLS-layer solutions. In practice, it may well be that no solution can meet every requirement and that practical solutions will have to make some compromises.}, }