2 ms·
Background: Servers are supposed to respond to ClientHellos indicating newer versions of SSL/TLS with a ServerHello indicating the latest version the server sup
by yuhong 11y ago
Background: Servers are supposed to respond to ClientHellos indicating newer versions of SSL/TLS with a ServerHello indicating the latest version the server supports. However not all servers did that properly. Thus browsers used to fall back to ClientHellos indicating old TLS and SSLv3 versions to support them. In this case, this server incorrectly responded to ClientHellos indicating SSL/TLS versions other than 1.0 with a SSLv3 ServerHello!