From 50028a3bbd27512a2cc3e746919c377899d8bf71 Mon Sep 17 00:00:00 2001 From: Daniel Cuthbert Date: Mon, 18 Nov 2024 10:32:54 +0000 Subject: [PATCH] added encrypted client hello to 9.4 to resolve #2358 (#2382) --- 5.0/en/0x17-V9-Communications.md | 1 + 1 file changed, 1 insertion(+) diff --git a/5.0/en/0x17-V9-Communications.md b/5.0/en/0x17-V9-Communications.md index 70a6e2de85..5823df2a3b 100644 --- a/5.0/en/0x17-V9-Communications.md +++ b/5.0/en/0x17-V9-Communications.md @@ -67,6 +67,7 @@ Use secure TLS configuration and up-to-date tools to review the configuration on | **9.4.1** | [MODIFIED, MOVED FROM 9.1.2] Verify that only the latest recommended cipher suites are enabled, with the strongest cipher suites set as preferred. | ✓ | ✓ | ✓ | 326 | | **9.4.2** | [MOVED FROM 9.1.3] Verify that only the latest recommended versions of the TLS protocol are enabled, such as TLS 1.2 and TLS 1.3. The latest version of the TLS protocol should be the preferred option. | ✓ | ✓ | ✓ | 326 | | **9.4.3** | [MOVED FROM 9.2.4] Verify that proper certification revocation, such as Online Certificate Status Protocol (OCSP) Stapling, is enabled and configured. | | ✓ | ✓ | 299 | +| **9.4.4** | [ADDED] Verify that Encrypted Client Hello (ECH) is supported and properly configured within the application’s TLS settings to prevent exposure of sensitive metadata, such as the Server Name Indication (SNI), during TLS handshake processes. | | | ✓ | | ## References