Ask Your Question

TLS Record has two versions

asked 2019-06-27 15:41:01 +0000

feenyman99 gravatar image

Hello. I am analyzing TLS packets, in support of my company's effort to restrict all TLS sessions to use version 1.2.

I have been aware for some time that there is both a Record version, and a Handshake version, in a TLS packet. But today was the first time I saw two different versions seemingly associated with the Record. Here is what I'm seeing...

image description

Can anyone explain how to interpret these two "Record versions"?

Thx, feenyman99

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2019-06-27 20:20:22 +0000

Jaap gravatar image

Look into the TLS handshake itself, there you'll see the handshake version which is the version the client supports. This, when agreed by the server, will define the version listed for the record layer.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2019-06-27 15:41:01 +0000

Seen: 372 times

Last updated: Jun 27 '19