On 08/02/15 01:11, Richard Moore wrote: > Maybe some edge case for things like the TLS_FALLBACK_SCSV could have an > effect, but even then I can't see how it would relevant to the code > that's actually doing this. I thought about that myself and so checked TLS_FALLBACK_SCSV - but even that is marked as "valid". Matt