3 ms·
Absolutely not. In TLS we now have two bogus version numbers you should ignore. We also have an extension that will signal the real version number. It'll also
by hannob 9y ago
Absolutely not.
In TLS we now have two bogus version numbers you should ignore. We also have an extension that will signal the real version number. It'll also send a bunch of bogus version numbers to "train" servers to expect and ignore bogus version numbers.
This is all due to the fact that server vendors found it too complicated to implement "if I get version higher than what I support I answer with the highest version I do support". Instead they often implement "if I get a version higher than I support I'll drop the connection".
But all of that was not enough to make TLS 1.3 work. It now also includes sending a bunch of bogus messages that have no meaning and are ignored, just to make it look more like TLS 1.2.
David Benjamin summarized that recently at Real World Crypto:
https://www.youtube.com/watch?v=_mE_JmwFi1Y https://www.youtube.com/watch?v=_mE_JmwFi1Y