Comment on The POODLE bites againparentComments−yuhong11yIt does not respond properly to clients trying to negotiate TLS 1.3. It should return a ServerHello showing the supported TLS 1.2 version.−feld11yI wasn't aware there was a TLS 1.3 PoC that people could use for testing.−yuhong11yIt is as simple as setting the version in the ClientHello message.−feld11yOh, I see
Comments
It does not respond properly to clients trying to negotiate TLS 1.3. It should return a ServerHello showing the supported TLS 1.2 version.
I wasn't aware there was a TLS 1.3 PoC that people could use for testing.
It is as simple as setting the version in the ClientHello message.
Oh, I see