Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 9
Abstract: To use TLS Encrypted ClientHello (ECH), the client needs to learn the ECH configuration for a server before it attempts a connection to the server. This specification provides a mechanism for conveying the ECH configuration information via DNS, using a SVCB or HTTPS resource record (RR).
Publication Date: 2026-03-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9848
Link: https://doi.org/10.17487/RFC9848
Author(s): Benjamin M. Schwartz
Mike Bishop
Erik Nygren
Keyword(s): ECH, SVCB, SNI

Latest version of IETF RFC 9848

Document Versions — IETF RFC 9848

▶ IETF RFC 9848 (2026-03-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1034 [Active*]
IETF RFC 2119 [Active*]
IETF RFC 4648 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 9364 [Active*]
IETF RFC 9460 [Active*]
IETF RFC 9849 [Active*]

Bibliographic Reference(s)

10.1007-978-3-319-08506-7_8 — CLINIC EXTERNAL
IETF RFC 7838 [Active*]
IETF RFC 8792 [Active*]
IETF RFC 9001 [Active*]
IETF RFC 9147 [Active*]
IETF RFC 9499 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9848.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9848, Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings. Available at https://doi.org/10.17487/RFC9848

Snippet:

IETF RFC 9848, Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings. Available at https://doi.org/10.17487/RFC9848

HTML (ISO 690 compliant)

Preview:

IETF RFC 9848, Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings. Available at https://doi.org/10.17487/RFC9848

Snippet:

<span class="citation"><cite>IETF RFC 9848</cite>, Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings. Available at <a href="https://doi.org/10.17487/RFC9848" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9848</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9848, Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings
doi: 10.17487/RFC9848
url: https://doi.org/10.17487/RFC9848

Snippet:

<li>
<cite id="bib-rfc9848">IETF RFC 9848</cite>, Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings
<span class="doi">10.17487/RFC9848</span>
</li>

Referenced By

IETF RFC 9849 [Active*]