1
$\begingroup$

In TLS 1.3, and since the server signs the entire handshake messages including the server hello message, in this case, is the SNI extension of the client hello message, is it included in the content for which the signature is generated. I know that the cipher suites exchanged are signed, but not sure about the SNI.

Improve this question
$\endgroup$
2
  • 4
    $\begingroup$ In TLS (and not only TLS 1.3) the whole handshake (including ClientHello and thus also SNI) is integrity protected, i.e. protected against manipulation. Application data will only be sent once the integrity of the handshake is successfully verified when receiving the Finished message at the end of the handshake. $\endgroup$
    – Steffen Ullrich
    Sep 18 at 6:32
  • 1
    $\begingroup$ @SteffenUllrich: I think you can just put that in as an answer $\endgroup$
    – poncho
    Sep 18 at 9:37

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.