On Mon, Jun 3, 2024 at 4:02 PM Filippo Valsorda <fili...@ml.filippo.io> wrote:
> 2024-06-03 15:34 GMT+02:00 Bas Westerbaan <b...@cloudflare.com>: > > More importantly, there are servers that will HRR to X25519 if presented a > P-256 keyshare. (Eg. BoringSSL's default behaviour.) Unfortunately I don't > have data at hand how often that happens. > > > Are you saying that some of the 97.6% of servers that support P-256 still > HRR to X25519 if presented a P-256 keyshare and a {P-256, X25519} supported > groups list, and that's BoringSSL's default behavior? > Yes.
_______________________________________________ TLS mailing list -- tls@ietf.org To unsubscribe send an email to tls-le...@ietf.org