mozilla/cipherscan

check for version downgrade

tomato42 opened this issue · 0 comments

tomato42 commented

some servers will negotiate SSL3 when getting a TLS 1.2 hello, but will negotate TLS 1.0 or TLS 1.1 when receiving respective hello's

add a check to detect that