Skip to main content
Information Security

Return to Question

replaced https://tools.ietf.org/html/rfc with https://www.rfc-editor.org/rfc/rfc
Source Link
Community Bot
Community Bot
  • 1

I am unsure about how extensions are handled in TLS v1.2.

During the handshake, the client is able to add some extensions during ClientHello. As far I understood, the server can pick arbitrary subsets from this list in ServerHello similar to picking the cipher suite, which the client provided during ClientHello. Is this correct?

If not, is it that the server can either take all those extensions into account, or must abort the handshake? I am not sure which is true.

I was looking for an adequate answer here in RFC5246here in RFC5246, but didn't really find the one statement I am looking for.

I am unsure about how extensions are handled in TLS v1.2.

During the handshake, the client is able to add some extensions during ClientHello. As far I understood, the server can pick arbitrary subsets from this list in ServerHello similar to picking the cipher suite, which the client provided during ClientHello. Is this correct?

If not, is it that the server can either take all those extensions into account, or must abort the handshake? I am not sure which is true.

I was looking for an adequate answer here in RFC5246, but didn't really find the one statement I am looking for.

I am unsure about how extensions are handled in TLS v1.2.

During the handshake, the client is able to add some extensions during ClientHello. As far I understood, the server can pick arbitrary subsets from this list in ServerHello similar to picking the cipher suite, which the client provided during ClientHello. Is this correct?

If not, is it that the server can either take all those extensions into account, or must abort the handshake? I am not sure which is true.

I was looking for an adequate answer here in RFC5246, but didn't really find the one statement I am looking for.

Tweeted twitter.com/StackSecurity/status/1214970215886401536
made question clearer
Source Link
edit approved Jan 8, 2020 at 1:50
LTPCGO
edit approved Jan 8, 2020 at 1:50
LTPCGO
  • 1.1k
  • 1
  • 8
  • 23

I am unsure about how extensions are handled in TLS v1.2.
During

During the handshake, the client is able to add some extensions during ClientHello. As As far I understood, the server can pick arbitrary subsets from this list in ServerHello similar to picking the cipher suite, which the client provided during ClientHello.
Another possibility would be Is this correct?

If not, is it that the server can either take all those extensions into account, or must abort the handshake. I? I am not sure, what which is true.
I

I was looking for an adequate answer here in RFC5246, but didn't really find the one statement I am looking for.

I am unsure about how extensions are handled in TLS v1.2.
During the handshake, the client is able to add some extensions during ClientHello. As far I understood, the server can pick arbitrary subsets from this list in ServerHello similar to picking the cipher suite, the client provided during ClientHello.
Another possibility would be, that the server can either take all those extensions into account or must abort the handshake. I am not sure, what is true.
I was looking for an adequate answer here, but didn't really find the one statement I am looking for.

I am unsure about how extensions are handled in TLS v1.2.

During the handshake, the client is able to add some extensions during ClientHello. As far I understood, the server can pick arbitrary subsets from this list in ServerHello similar to picking the cipher suite, which the client provided during ClientHello. Is this correct?

If not, is it that the server can either take all those extensions into account, or must abort the handshake? I am not sure which is true.

I was looking for an adequate answer here in RFC5246, but didn't really find the one statement I am looking for.

Source Link
Lavair
Lavair
  • 175
  • 5

TLS 1.2 Handshake: Does the server have to take all extensions sent by the Client?

I am unsure about how extensions are handled in TLS v1.2.
During the handshake, the client is able to add some extensions during ClientHello. As far I understood, the server can pick arbitrary subsets from this list in ServerHello similar to picking the cipher suite, the client provided during ClientHello.
Another possibility would be, that the server can either take all those extensions into account or must abort the handshake. I am not sure, what is true.
I was looking for an adequate answer here, but didn't really find the one statement I am looking for.