tree 3e5ba5f9bbe7d74b514e86f64f0a69b30ac85e8b
parent aa24851515d6280aa1d6a8b1548fe74691df3136
author David Benjamin <davidben@google.com> 1471031448 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1471033299 +0000

Add a comment about ServerHello.supported_groups.

In TLS 1.2 and below, the server is not supposed to echo it, but I just
came across a BigIP server which does. Document this so we know to take
care before trying to flip it in the future.

(It's actually kind of odd that it wasn't allowed to be sent given TLS
1.2 makes supported_groups interact with ECDSA client certificates. Ah
well.)

Change-Id: I4b97266f461e85bb1ad9bb935470e027f926d4df
Reviewed-on: https://boringssl-review.googlesource.com/10320
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: Adam Langley <agl@google.com>