Website might break when using TLSv1.3 Hybridized Kyber protocol.

Products

• ISG Proxy
• ProxySG Software - SGOS

Issue/Introduction

TLSv1.3 Hybridized Kyber protocol is supported by the Chrome browser.

The proxy is decrypting the SSL traffic or SSL interception is happening on the policy.

Resolution

Currently, the proxy is not supporting TLSv1.3 Hybridized Kyber protocol when the SSL proxy is doing SSL inspection.

The workaround is to disable protocol detection or tunnel the traffic.

Sometimes the website might still break even after disabling protocol detection or being tunneled, this might be due to the browser only supporting TLSv1.3 Hybridized Kyber and not others or there is no fallback to other ciphers or protocol. The workaround for this would be disabling the TLSv1.3 Hybridized Kyber protocol on the Chrome browser.