Page MenuHomePhabricator

Enable ESNI support on Wikimedia servers
Open, MediumPublicFeature

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

I would think this needs to come from nginx upstream

@Shizhao: Is this a feature request? Currently it looks like a question, and questions can be asked on mailing lists, on IRC, or in forums.

Krenair renamed this task from WMF servers support ESNI? to Enable ESNI support on Wikimedia servers.Sep 28 2018, 10:22 AM
Krenair added a project: Upstream.

@Shizhao: Is this a feature request? Currently it looks like a question, and questions can be asked on mailing lists, on IRC, or in forums.

While phrased weirdly, I think we can assume he is asking us to support the experimental ESNI TLS extension (https://tools.ietf.org/html/draft-ietf-tls-esni-01).

The feature may have interesting implications related to state censorship of Wikipedia.

@Krenair @Bawolff @jcrespo Wondering if we can enable QUIC support on our server clusters instead? I've heard that the github Googlehosts is providing the QUIC access to Google HK.

@Krenair @Bawolff @jcrespo Wondering if we can enable QUIC support on our server clusters instead? I've heard that the github Googlehosts is providing the QUIC access to Google HK.

I'm not really familiar with the QUIC protocol/upcoming HTTP/3 stuff, but i think that's a rather separate request. I think that QUIC is still using TLS, so still uses normal SNI (or eventually ESNI)

Shizhao changed the subtype of this task from "Task" to "Feature Request".Sep 25 2019, 4:02 AM
BBlack added a subscriber: BBlack.

The swap of Traffic for Traffic-Icebox in this ticket's set of tags was based on a bulk action for all tickets that aren't are neither part of our current planned work nor clearly a recent, higher-priority emergent issue. This is simply one step in a larger task cleanup effort. Further triage of these tickets (and especially, organizing future potential project ideas from them into a new medium) will occur afterwards! For more detail, have a look at the extended explanation on the main page of Traffic-Icebox . Thank you!