Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

TLS record layer and Handshake protocol

I was looking at the some of the TLS handshake in wire shark and I could see that version field says TLS 1.0 under record layer: Handshake protocol:client Hello(I am looking at the client hello) and then another version field inside the same client hello says TLS 1.2 under handshake protocol:client hello. In both cases, I dont see any fields that said TLS1.3. I saw one version field that said 1.0 and another version filed that said 1.2 in my client hello. But, wireshark protocol field says it is TLS1.3. How wire shark came to that conclusion?