{
  "number": 9848,
  "title": "Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings",
  "authors": [
    "B. Schwartz",
    "M. Bishop",
    "E. Nygren"
  ],
  "published": "2026-03",
  "status": "Proposed Standard",
  "stream": "IETF",
  "area": "sec",
  "working_group": "tls",
  "pages": 9,
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "abstract": "To use TLS Encrypted ClientHello (ECH), the client needs to learn the ECH configuration for a server before it attempts a connection to the server. This specification provides a mechanism for conveying the ECH configuration information via DNS, using a SVCB or HTTPS resource record (RR).",
  "keywords": [
    "ech SvcParamKey",
    "ech SvcParam",
    "ECH",
    "SVCB",
    "HTTPS Resource Records",
    "TLS SNI",
    "Encrypted SNI",
    "Server Name Indication",
    "Encrypted Server Name Indication"
  ],
  "draft": "draft-ietf-tls-svcb-ech-08",
  "doi": "10.17487/RFC9848",
  "urls": {
    "html": "https://rfc.dk/rfc9848/",
    "text": "https://rfc.dk/rfc9848.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc9848",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9848/"
  },
  "text_modified": "2026-03-04T05:45:34.334847067Z"
}