RFC 9849 (#65)

Author: rthellend

client_hello.go

@@ -25,8 +25,7 @@ type clientHello struct {
 	echExt                *echExt
 }
 
-// The ECH Extension as specified in Section 5 of
-// https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni/.
+// The ECH Extension as specified in Section 5 of RFC 9849.
 type echExt struct {
 	Type        uint8
 	CipherSuite CipherSuite
@@ -330,7 +329,7 @@ func (c *clientHello) parseExtensions() error {
 			c.hasECHOuterExtensions = true
 
 		case 0xfe0d:
-			// https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni/
+			// RFC 9849
 			// 5.  The "encrypted_client_hello" Extension
 			//
 			// enum {

config.go

@@ -135,7 +135,7 @@ func parseConfig(s *cryptobyte.String) (ConfigSpec, error) {
 }
 
 // ConfigSpec represents an Encrypted Client Hello (ECH) Config. It is specified
-// in Section 4 of https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni/
+// in Section 4 RFC 9849.
 type ConfigSpec struct {
 	Version           uint16
 	ID                uint8

doc.go

@@ -2,7 +2,7 @@
 // Mode Topology (a.k.a. TLS Passthrough), along with secure client-side name
 // resolution and network connections.
 //
-// Split Mode Topology is defined in https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni/#section-3.1
+// Split Mode Topology is defined in https://datatracker.ietf.org/doc/html/rfc9849#section-3.1
 //
 //	Client ----> Client-Facing Server ----> Backend Servers
 //	             (public.example.com)       (private1.example.com)

docs/README.md

@@ -5,7 +5,7 @@
 
 This repo implements a library to support Encrypted Client Hello with a Split Mode Topology, along with secure client-side name resolution and network connections.
 
-Split Mode Topology is defined in https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni/#section-3.1
+Split Mode Topology is defined in [RFC 9849](https://datatracker.ietf.org/doc/html/rfc9849#section-3.1).
 
 ```mermaid
 flowchart LR

ech.go

@@ -34,8 +34,7 @@ func WithDebug(f func(format string, arg ...any)) Option {
 }
 
 // NewConn returns a [Conn] that manages Encrypted Client Hello in TLS
-// connections, as defined in
-// https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni/ .
+// connections, as defined in RFC 9849.
 //
 // Encrypted Client Hello handshake messages are decrypted and replaced with the
 // ClientHelloInner transparently. If decryption fails, the HelloClientOuter is
@@ -93,8 +92,7 @@ func NewConn(ctx context.Context, conn net.Conn, options ...Option) (outConn *Co
 	return outConn, nil
 }
 
-// Conn manages Encrypted Client Hello in TLS connections, as defined in
-// https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni/ .
+// Conn manages Encrypted Client Hello in TLS connections, as defined in RFC 9849.
 type Conn struct {
 	net.Conn // The underlying connection