3 ms·
> * elliptic curve support. > * downgrade protection. These are not new. Particularly the second is a complicated story. TLS always had downgrade protection
by hannob 8y ago
> * elliptic curve support.
> * downgrade protection.
These are not new.
Particularly the second is a complicated story. TLS always had downgrade protection, but at some point browsers had to decide to break downgrade protection, because there were too many shitty devices out there that didn't implement the TLS handshake correctly.
- tialaramex 8y agoTLS 1.3 downgrade protection is cleverer than previous approaches because the downgrade marker is scribbled into a field used for connection setup whenever a TLS 1.3 server ends up not doing TLS 1.3. If an attacker erases the marker, the connection fails. If they don't erase it the downgrade is reported to the client. If the client doesn't know TLS 1.3 the marker means nothing to it.