Re:The POODLE bites again
by yuhong on Tuesday December 09, 2014 @05:44PM
(#8726369)
It does not respond properly to clients trying to negotiate TLS 1.3. It should return a ServerHello showing the supported TLS 1.2 version.
[ Parent
| on HN ]
I wasn't aware there was a TLS 1.3 PoC that people could use for testing.
It is as simple as setting the version in the ClientHello message.