4 ms·

> The TLS_FALLBACK_SCSV will prevent downgrade attacks And it's only implemented by boringssl, ie, Google Chrome and Google's web servers?

• brians 12y ago
  It's independently in others servers as well. No idea on clients yet.
  • wonsler 12y ago
    See https://github.com/yahoo/cnet https://github.com/yahoo/cnet for a client that uses BoringSSL