How the TLS handshake works, and why half of it is gone
New on the blog: a full walkthrough of the TLS handshake. It leads with the TLS 1.3 flow step by step, then covers how we got here: BEAST, CRIME, POODLE, FREAK, Logjam, and SHAttered each removed a piece of the old handshake. Diagrams throughout, including the SSL 3.0 flow most of us learned that no longer exists.
u/certkit — 11 days ago