Merge pull request #168 from ietf-wg-masque/tfpauly-patch-2

Require encryption
ietf-wg-masque · Apr 20, 2023 · d8e8cf5 · d8e8cf5
2 parents eae3a00 + 61825c5
commit d8e8cf5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/draft-ietf-masque-connect-ip.md b/draft-ietf-masque-connect-ip.md
@@ -210,6 +210,9 @@ HTTP-DGRAM}}), IP proxying requests do not carry any message content.
 Similarly, successful IP proxying responses also do not carry any message
 content.
 
+IP proxying over HTTP MUST be operated over TLS or QUIC encryption, or another equivalent
+encryption protocol, to provide confidentiality, integrity, and authentication.
+
 ## IP Proxy Handling
 
 Upon receiving an IP proxying request: