3 ms·
Pretty sure this isn't possible?? There must be some way to use a hash of the clientHello later in the key exchange process to make sure the connection fails
by londons_explore 1y ago
Pretty sure this isn't possible?? There must be some way to use a hash of the clientHello later in the key exchange process to make sure the connection fails if the hello is tampered with...?
- kevvok 1y agoYeah, the ClientHello message(s) are already part of the transcript signed by the server (and the client in mTLS) during the handshake