 | 1 | initial version |
Where in the details does it show as TLS 1.2?
If you are using Wireshark 4.4.0 or later, there should be an expert info item added in the ServerHelllo which notes that if the supported_versions extension is present, then the legacy_version field, which always indicates TLS 1.2 for backwards compatibility with middleboxes, MUST be ignored and the version in supported_versions used instead.
| | 2 | No.2 Revision |
Where in the details does it show as TLS 1.2? What version of Wireshark are you using?
If you are using Wireshark 4.4.0 or later, there should be an expert info item added in the ServerHelllo which notes that if the supported_versions extension is present, then the legacy_version field, which always indicates TLS 1.2 for backwards compatibility with middleboxes, MUST be ignored and the version in supported_versions used instead.instead. That is almost certainly what is going on here; you are looking at the legacy_version field which only indicates the version in older versions of TLS, but always indicates TLS 1.2 in TLS 1.3.
