Re: [TLS] ClientHello record header version

2018-02-02 Thread R du Toit
> What implementation are you working on? Proprietary, closed-source TLS stack. >  Section 5.1 says that, in TLSPlaintext, the legacy_record_version "MUST be >ignored for all purposes". Agree.  The interop issue was definitely on my side, and I was just using it as background for my quest

Re: [TLS] ClientHello record header version

2018-02-02 Thread David Benjamin
What implementation are you working on? Section 5.1 says that, in TLSPlaintext, the legacy_record_version "MUST be ignored for all purposes". And, of course, any pre-1.3 middleboxes which hit this case are non-compliant. That would imply they assume they can parse messages following a ClientHello t