4 ms·
Can anyone confirm if the server certificate in the server hello message is encrypted or not? I've heard many time it's encrypted, but I can't find it explicit
by ecesena 8y ago
Can anyone confirm if the server certificate in the server hello message is encrypted or not?
I've heard many time it's encrypted, but I can't find it explicitly written in the RFC. And it seems unencrypted in this example.
- rwbhn 8y agoAccording to the post the server cert is not sent in the server hello, but later in the handshake, after encryption has been established.
- rwbhn 8y agoSection 4.4 of the rfc[1] makes it clear the cert is sent encrypted. [1] https://tools.ietf.org/html/rfc8446#section-4.4 https://tools.ietf.org/html/rfc8446#section-4.4
- tialaramex 8y agoAs someone explained the certificate isn't part of ServerHello. After ServerHello is sent, the server knows a client now has everything it needs to establish all the keys, so it encrypts all subsequent data. The pretence that this is just a TLS 1.2 session resumption continues though. So there's a wrapper shown in the document. This wrapper claims to be TLS 1.2 encrypted application data. In fact it's TLS 1.3 encrypted handshake data. For clarity in the document they show both the whole encrypted wrapper, its decrypted data, and then the separate components inside that decrypted data.