News for hackers. Stuff that matters.
Re:The POODLE bites again by feld on Monday December 08, 2014 @10:27PM (#8720840)
TLS 1.3 isn't finished yet...
Re:The POODLE bites again by yuhong on Monday December 08, 2014 @10:45PM (#8720901)
I know, the goal is to prepare.
Re:The POODLE bites again by feld on Tuesday December 09, 2014 @08:29AM (#8722558)
I'm not sure what you mean then by servers having TLS 1.3 intolerance.
Re:The POODLE bites again by yuhong on Tuesday December 09, 2014 @05:44PM (#8726369)
It does not respond properly to clients trying to negotiate TLS 1.3. It should return a ServerHello showing the supported TLS 1.2 version.
Re:The POODLE bites again by feld on Friday December 12, 2014 @08:55AM (#8739966)
I wasn't aware there was a TLS 1.3 PoC that people could use for testing.
Re:The POODLE bites again by yuhong on Friday December 12, 2014 @03:47PM (#8742600)
It is as simple as setting the version in the ClientHello message.
Re:The POODLE bites again by feld on Saturday December 13, 2014 @12:43PM (#8745718)
Oh, I see