4 ms·

What is frustrating is how many such servers have TLS 1.3 intolerance (even PayPal), and often the same servers are also affected by this bug. I wonder what TLS

by yuhong 12y ago

What is frustrating is how many such servers have TLS 1.3 intolerance (even PayPal), and often the same servers are also affected by this bug. I wonder what TLS implementation is this.

feld 12y ago
TLS 1.3 isn't finished yet...
- yuhong 12y ago
  I know, the goal is to prepare.
  - feld 12y ago
    I'm not sure what you mean then by servers having TLS 1.3 intolerance.
    - yuhong 12y ago
      It does not respond properly to clients trying to negotiate TLS 1.3. It should return a ServerHello showing the supported TLS 1.2 version.
      - feld 12y ago
        I wasn't aware there was a TLS 1.3 PoC that people could use for testing.
        yuhong 12y ago
        It is as simple as setting the version in the ClientHello message.
        feld 12y ago
        Oh, I see