1

As part of TLS1.3 handshake client hello sent containing the TLS1.3 version support as part of suppored_versions extension, consider if as part of server hello supported_versions extension is not present, but Legacy_version is set to 0x0304(TLS1.3), should the client accept this message or reject? Point 2: though it is mentioned as part of rfc8446 that if server is negotiating with TLS1.3 the support should be present as part of extension in server hello, but my question is for the error case where TLS1.3 support is indicated as part of server hello.legacy_version, Because ,In specification it is not explicitly mentioned that client should ignore message if TLS1.3 negotiation happens through legacy_version

Improve this question

1 Answer 1

Reset to default
1

You are basically asking how the server should behave if the client is violating the standard. A server which would continue the handshake with such a client would obviously not follow the standard either, since it is not defined how to successfully continue with the handshake in such a situation. This means in order for the server to follow the standard it has to abandon the TLS handshake with the non-compliant client.

Improve this answer
2
  • Hi Steffen,what I meant to ask is how card behaves when server is violating standard with respect to the version negotiation indication
    – hjhjh
    Commented Jul 24 at 9:58
  • @hjhjh: as I said: if the standard is violated by the peer then a standard-compliant implementation should not continue. "... how card behaves ..." - no idea what "card" you refer to here.
    – Steffen Ullrich
    Commented Jul 24 at 10:09

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .