Timeline for Can firewalls decrypt SSL packets?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 16, 2020 at 20:15 | history | edited | JD Brennan | CC BY-SA 4.0 |
Clarified that this applies to TLS 1.2
|
| Jul 23, 2020 at 0:46 | comment | added | dave_thompson_085 | In TLS 1.3, now becoming fairly common (though it didn't exist in 2016 when the Q was asked), static-RSA keyexchange no longer exists and the certificates are encrypted. SNI still isn't by default, although there is an optional and not commonly used extension to do so. Also, any tampering with the handshake, including version or keyexchange or certificates, is detected by the Finished exchange and the connection aborted (all versions back to SSLv3). | |
| Jul 22, 2020 at 19:35 | review | First posts | |||
| Jul 22, 2020 at 20:32 | |||||
| Jul 22, 2020 at 19:29 | history | answered | JD Brennan | CC BY-SA 4.0 |