The hello message is protected by digests at the end of the handshake. Otherwise the national scale adversary (NSA) could tweak anything. The point about fallback is the attacker doesn't have to touch the content to make the client fallback, it just has to interrupt at the TCP layer
-- Principal Security Engineer, Akamai Technologies IM: rs...@jabber.me Twitter: RichSalz
