TLS 1.2 / 1.3 Handshake Inspector

TLS 1.2 / 1.3 Cipher Suite & Handshake InspectorIn-Browser WebCrypto

Explore modern TLS cryptographic handshakes, ECDHE key exchanges, and AES-GCM cipher suite security ratings.

PFS: Forward Secret
Latency:1-RTT (1 RTT)
Rating:Grade A+
Negotiation Configuration Parameters
Sends early application payload in the very first flight

Flight Overview1 RTT

Client Server

In TLS 1.3, key exchange occurs concurrently with the initial hello message. The server responds with encrypted extensions and certificate immediately.

Selected Cipher Suite
TLS_AES_256_GCM_SHA384
Security Grade:A+
Forward Secrecy:Protected (ECDHE)
Security Legend
Encrypted with Handshake / Application Keys
Unencrypted (Plaintext wire metadata)

Unlike TLS 1.2, TLS 1.3 includes speculative Diffie-Hellman public keys directly in the ClientHello, eliminating an entire network round-trip.

Packet Payload FieldsRFC 8446 §4.1.2
Version:TLS 1.3 (advertised via supported_versions extension 0x0304)
Client Random:32 cryptographically secure random bytes
SNI (Host):api.toolsaa.com
Cipher Suites:TLS_AES_256_GCM_SHA384
Key Share Extension:Group: X25519 (Ephemeral Public Key)
ALPN Extension:h2, http/1.1
Security Significance: Speculative key shares allow immediate 1-RTT cryptographic derivation without multiple back-and-forth negotiations.