What if the attacker is MitMing you with a TCP proxy (like they would have to do for BREACH anyway?)