Google Chrome's new post-quantum cryptography may break TLS connections

by LinAGKaron 4/30/24, 7:40 AMwith 1 comments
by LinAGKaron 4/30/24, 7:40 AM

This seems like another example of protocol ossification[1] (servers making assumptions about a protocol based on how it's used in practice, which breaks things when how it's used changes), in this case due to servers assuming the client hello is below a certain size.

[1] https://en.wikipedia.org/wiki/Protocol_ossification, https://blog.cloudflare.com/why-tls-1-3-isnt-in-browsers-yet