Re:Why TLS 1.3 isn't in browsers yet
by mkonecny on Thursday December 28, 2017 @11:08AM
(#16022816)
This is exactly with what happened with Poodle and SSLv3 and it's in the article. Attackers were successfully downgrading to the vulnerable SSL when a TLS connection was attempted.
In the future when TLS1.2 is considered insecure, we do not want this workaround in place.
In the future when TLS1.2 is considered insecure, we do not want this workaround in place.