Skip to content

Commit 5bedece

Browse files
authored
Merge pull request #9 from tlswg/example
Add an example encoding, for both presentation and wire formats
2 parents c11fac9 + d79c228 commit 5bedece

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

draft-ietf-tls-key-share-prediction.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,15 @@ The presentation `value` of the SvcParamValue is a non-empty comma-separated lis
6868

6969
The wire format of the SvcParamValue is a sequence of 2-octet numeric values in network byte order. An empty list of values is invalid, as is a list containing duplicates.
7070

71+
For example, a TLS server which prefers `x25519` (29) and also supports `secp256r1` (23) would a `tls-supported-groups` SvcParamValue containing 29 and 23. The presentation `value` would be "29,23". The wire format of the SvcParamValue would be four octets, represented in hexadecimal as `001d0017`.
72+
73+
The following is an example of the value appearing in a complete DNS record in the presentation syntax:
74+
75+
~~~ dns
76+
example.net. 7200 IN SVCB 3 server.example.net. (
77+
port="8004" tls-supported-groups=29,23 )
78+
~~~
79+
7180
## Configuring Services
7281

7382
Services SHOULD include supported TLS named groups, in order of decreasing preference in the `tls-supported-groups` parameter of their HTTPS or SVCB endpoints. As TLS preferences are updated, services SHOULD update the DNS record to match. Services MAY include GREASE values {{!RFC8701}} in this list.

0 commit comments

Comments
 (0)