[Feature request] Verify support for long CilentHello messages about testssl.sh

[drwetter]

Good idea, @dcooper16 .

Do you know of any public web sites which fail, best deliberately?

[dcooper16]

Do you know of any public web sites which fail, best deliberately?

No. Yesterday, a co-worker pointed out an article noting that some users are experiencing problems now that the latest versions of some browsers are offering post-quantum algorithms for key agreement by default. I just wanted to raise the issue here before I forgot.

Given that testing was done before the browsers enabled this by default, the problem must not be that common. That may make it difficult to find a site to test against to help verify that the code is correct.

[drwetter]

Not sure I understand the python program correctly *) . Am I right there should be just an exception after the first write (Sending the ClientHello in a single write)

*) This PR needed to be applied in my case: https://patch-diff.githubusercontent.com/raw/dadrian/tldr.fail/pull/5.diff

[drwetter]

Found more information. The guys from cyberstorm.mu (hi/bonjour) tested IP from their country, see https://github.com/JoottunAtish/TLDR_TESTING . There's also information which failed by the time of the assessment, i.e. 2 months ago.