> If a TLS 1.3 client will happily connect to an ETS server that isn't playing by the rules, doesn't that indicate a flaw in 1.3? There is a way to detect this

> If a TLS 1.3 client will happily connect to an ETS server that isn't playing by the rules, doesn't that indicate a flaw in 1.3? There is a way to detect this. Record the last ephemeral public key that server used with you. If it uses the same one again, refuse to connect.