undefined | Better HN

0 pointsyuhong11y ago0 comments

It does not respond properly to clients trying to negotiate TLS 1.3. It should return a ServerHello showing the supported TLS 1.2 version.

0 comments

feld11y ago

I wasn't aware there was a TLS 1.3 PoC that people could use for testing.

yuhongOP11y ago

It is as simple as setting the version in the ClientHello message.

feld11y ago

Oh, I see

j / k navigate · click thread line to collapse

0 pointsyuhong11y ago0 comments

It does not respond properly to clients trying to negotiate TLS 1.3. It should return a ServerHello showing the supported TLS 1.2 version.

feld11y ago

I wasn't aware there was a TLS 1.3 PoC that people could use for testing.

yuhongOP11y ago

It is as simple as setting the version in the ClientHello message.

feld11y ago

Oh, I see

j / k navigate · click thread line to collapse