Repository navigation

gh-89730: Implement support for Encrypted Client Hello (ECH) in `ssl` - #160318

Open

ZeroIntensity wants to merge 22 commits into

python:mainfrom

ZeroIntensity:ech

Open

gh-89730: Implement support for Encrypted Client Hello (ECH) in `ssl`#160318
ZeroIntensity wants to merge 22 commits into
python:mainfrom
ZeroIntensity:ech

Commits on Oct 22, 2026
- EncryptedClientHello support in ssl module
  
  ZeroIntensity
  and
  irl
  committed
  4b91de4
- Let Codex go nuts.
  ZeroIntensity
  committed
  5649b6e
- Don't set attributes when ECH is not available.
  ZeroIntensity
  committed
  e679e76
- Clanker review.
  ZeroIntensity
  committed
  666eca4
- Implement support for ECH servers.
  ZeroIntensity
  committed
  5097bb0
- Some fixes.
  ZeroIntensity
  committed
  dc389ff
- Some cleanup.
  ZeroIntensity
  committed
  0167ac1
- Per-socket ECH config.
  ZeroIntensity
  committed
  6ebce14
- Support password callbacks for ECH keys.
  ZeroIntensity
  committed
  3874a27
- Adjust comments.
  ZeroIntensity
  committed
  25e4827
Commits on Oct 23, 2026
- Clean up the docs.
  ZeroIntensity
  committed
  10be52f
- Update Modules/_ssl.c
  
  ZeroIntensity
  and
  gpshead
  authored
  7e3fc05
- Don't suggest retrying for real ECH when using GREASE.
  ZeroIntensity
  committed
  07024d5
- Add a comment and test for workaround.
  ZeroIntensity
  committed
  8bde466
- Fix retry config docs.
  ZeroIntensity
  committed
  2f402d7
- Fix the retry config setter.
  ZeroIntensity
  committed
  f9e1a29
- Support base64 and don't try to skip unusable entries.
  ZeroIntensity
  committed
  33f1324
- Add debug checks.
  ZeroIntensity
  committed
  a3d735a
- Add some missing things to the docs.
  ZeroIntensity
  committed
  97eee22
- Remove set_outer_server_name
  ZeroIntensity
  committed
  7e43ba3
- Fix race.
  ZeroIntensity
  committed
  a4abe86
- Add a comment for the OpenSSL bug.
  ZeroIntensity
  committed
  6b12d19

Commits

Commits on Oct 22, 2026

Commits on Oct 23, 2026