Re: Compatibility of X25519Kyber768 ClientHello

2023-10-09 Thread Jeffrey Walton
On Mon, Oct 9, 2023 at 11:55 AM Gentry Deng via nginx wrote: > > ... > I'm able to reproduce the problem. It looks like a bug in www.paypal.cn's > server. They didn't implement TLS 1.2 correctly. Specifically, they do not > correctly handle when the ClientHello comes in in two reads. Before Kybe

Re: Compatibility of X25519Kyber768 ClientHello

2023-10-09 Thread Maxim Dounin
Hello! On Mon, Oct 09, 2023 at 11:55:15PM +0800, Gentry Deng via nginx wrote: > I recently encountered a compatibility issue with X25519Kyber768 > : I was > unable to access the site via X25519Kyber768-enabled Google Chrome on a >

Compatibility of X25519Kyber768 ClientHello

2023-10-09 Thread Gentry Deng via nginx
Hello, I recently encountered a compatibility issue with X25519Kyber768 : I was unable to access the site via X25519Kyber768-enabled Google Chrome on a server with only TLS 1.2 enabled, but not TLS 1.3. The Chromium team replied