3 ms·

I wonder how they manage the SHA-1 fallback? Guess it might be a proxy which decides it, based on the user-agent.

• jgrahamc 11y ago
  By examining the ClientHello.
  • r1ch 11y ago
    Wouldn't this make modern browsers vulnerable to a downgrade attack via an active MITM?
    • deleted 11y ago
      [deleted]
    • ianlevesque 11y ago
      Modern browsers are removing SHA-1 support. The MITM would not be able to downgrade them to something they've removed.