tlswg/tls13-spec — pull request #46 by colmmacc (2014-06-20 15:48:13+00:00)
Title: Update signed_params to included hello.random data

This change clarifies that the signature over ServerDHParams data is a
signature over the hash of the client + server hello random random data and the
ServerDHParams data.

I believe this small regression was introduced in TLS1.2 with the result
that the TLS1.2 RFC (and current TLS1.3 draft) does not contain sufficient detail
to implement TLS + DHE.

All TLS1.2 clients and servers that I have tested do include the hello random
data (and omitting it would leave implementations open to replay attacks).