3 ms·
We actually look at the sigalgs and the cipher suites and have code that understands the behavior of different browsers. For example, Chrome on Windows XP sends
by jgrahamc 11y ago
We actually look at the sigalgs and the cipher suites and have code that understands the behavior of different browsers. For example, Chrome on Windows XP sends ECDSA/SHA256 in its sigalgs, but doesn't actually support ECDSA.
- ryan-c 11y agoI figured you'd look at the cipher suites and have a list of fingerprints for ones that needed special handling. I'm pretty surprised that WinXP Chrome falsely claims support for ECDSA... Does the switch to BoringSSL fix that, or no because Chrome's relying on the built in Windows certificate store/validation?