Pdns: Support ESNI and/or HTTPSSVC Resource Record

Created on 17 Aug 2019  路  4Comments  路  Source: PowerDNS/pdns
  • Program: Authoritative
  • Issue type: Feature request

Short description

The request is about supporting ESNI and/or HTTPSSVC DNS Resource Record as mentioned in the ESNI Internet Draft and the HTTPSSVC Internet Draft.

Use case

Any browser correctly supporting ESNI (none at the moment, Firefox only does it with DoH support) will be able to send a ClientHello message with an encrypted server_name to an HTTP server supporting ESNI (h2o built with picotls) thanks to the publishing of the DNS RR related to ESNI when pdns-auth will support it.

Description

PDNS should support ESNI DNS Resource Record and/or HTTPSSVC Resource Records.
But openssl currently does not support ESNI...Only a specific branch supports it.

BIND9 might soon support HTTPSSVC RR (under review process).

auth feature request
Source
picture HLFH

Most helpful comment

https://doc.powerdns.com/authoritative/changelog/4.4.html#change-4.4.0-alpha1

the SVCB and HTTPS record types are supported, with limited additional processing

(via #9369)

picture Habbie on 20 Oct 2020
🎉2

All 4 comments

It looks like they don't have assigned numbers yet, or am I missing something?

Habbie picture Habbie on 17 Aug 2019
👍1

Any updates regarding this? :)

wioxjk picture wioxjk on 20 Oct 2020

See #9369.

zeha picture zeha on 20 Oct 2020
🚀1

https://doc.powerdns.com/authoritative/changelog/4.4.html#change-4.4.0-alpha1

the SVCB and HTTPS record types are supported, with limited additional processing

(via #9369)

Habbie picture Habbie on 20 Oct 2020
🎉2
Was this page helpful?
0 / 5 - 0 ratings

Related issues

M4t7e picture M4t7e  路  4Comments
edmonds picture edmonds  路  6Comments
maikzumstrull picture maikzumstrull  路  6Comments
jonpaulh picture jonpaulh  路  6Comments
paddg picture paddg  路  8Comments