3 ms·
If the server hasn't ordered preferences then wouldn't you be trusting that every client is updated enough to understand what "highest" means?
by Already__Taken 8y ago
If the server hasn't ordered preferences then wouldn't you be trusting that every client is updated enough to understand what "highest" means?
- stock_toaster 8y agoPerhaps you are thinking of cipher selection, and "prefer server ciphers"? Those are separate tunables. EDIT: Here is a description of protocol selection: https://en.wikipedia.org/wiki/Transport_Layer_Security#Basic_TLS_handshake https://en.wikipedia.org/wiki/Transport_Layer_Security#Basic... and shows the basic negotiation phase. (first two bullet points under the first numbered item)
- cesarb 8y agoSince TLS 1.3, version selection is more similar to cipher selection. See https://tools.ietf.org/html/rfc8446#section-4.2.1 https://tools.ietf.org/html/rfc8446#section-4.2.1 : "The extension contains a list of supported versions in preference order, with the most preferred version first."