On 2022/11/16 18:10, Stuart Henderson wrote: > I don't use the google mail app but I do use aquamail on Android and > that only sends a TLSv1.2 client hello (you can feed a file saved from
Just tried gmail (2022.10.16.486292356.Release, on Android 12, 1 Oct patch level) and that only sends a 1.2 clienthello. At least it's better than Apple mail which still required TLS1.0 years after it shouldn't have :) > e.g. "tcpdump -s1500 -w somefile port 993" into wireshark which can > differentiate between the two). I suspect it bundles some other TLS ...or termshark makes this easier > library rather than using the system one and it's a bit outdated, > the standard browser on the same phone does get TLSv1.3.
