A hybrid TLS offer can still negotiate X25519
Eight controlled rustls handshakes show why a hybrid offer alone does not predict failure. The mixed ClientHello carries a separate classic key share.
1 Heretic investigation tagged TLS. Each carries its experiment and a hashed reproduction archive.
Eight controlled rustls handshakes show why a hybrid offer alone does not predict failure. The mixed ClientHello carries a separate classic key share.
The public demo returns the verdict and its named findings.