Post

Replies

Boosts

Views

Activity

Cipher Suites in Client Hello
Hi everyone, I have the following question, would be great if anyone could help me understand this: How are the cipher suites for a client hello chosen, when ATS for example has only NSAllowsArbitraryLoads set to true (and no other domain dependent exceptions are set)? I‘m asking this because I got really confused by an app which whenever trying to connect to e.g. domain a.com proposed 27 ciphers in its hello, while the same app when connecting to b.com suddenly only proposed 7 cipher suites… If in its info.plist there where domain dependent exceptions this could make totally sense, but given my case I really don‘t understand why this is the case. So why can an app use different sets of cipher suites in its client hello when the only ATS exception is the one given above? Can someone tell me why this is happening or am I missing something?
4
0
1.5k
Oct ’22