From 40a4761695c0bf7ee49e4da5f36747b432a7d2ff Mon Sep 17 00:00:00 2001 From: Christopher Wood Date: Wed, 11 Oct 2023 08:18:21 -0400 Subject: [PATCH] Update draft-ietf-tls-esni.md Co-authored-by: Christopher Patton --- draft-ietf-tls-esni.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/draft-ietf-tls-esni.md b/draft-ietf-tls-esni.md index 26915575..c563d0ec 100644 --- a/draft-ietf-tls-esni.md +++ b/draft-ietf-tls-esni.md @@ -1206,7 +1206,7 @@ between the client and client-facing server, as well as between the client-facing and backend servers when running ECH in Split Mode. However, for Split Mode in particular, ECH makes two additional assumptions: -1. The channel between the client-facing and backend server is authenticated +1. The channel between each client-facing and each backend server is authenticated such that the backend server only accepts messages from trusted client-facing servers. The exact mechanism for establishing this authenticated channel is out of scope for this document.