Finished checks the transcript
04A derived verification value binds the handshake messages to the negotiated secret.
Terms in this drawing
This guide explains the 2008 publication. Superseded by RFC 8446, RFC 9846.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 7.4.9 ↗
RFC 5246 · § 7.4.9EXAMPLE
3 / 3
03
Mismatch stops
An incorrect Finished aborts the handshake rather than opening application traffic.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
Recipients must verify the Finished contents.
- Recipients must verify the Finished contents.
- Finished is the first message protected by the newly negotiated state.
- Application traffic starts after the required Finished exchange succeeds.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy