Sketch a TLS 1.3 handshake (with and without compatibility mode)

Question

Hello,

If we are asked to sketch a TLS 1.3 handshake with and without compatibility mode, should we include the HelloRetryRequest in both cases, or assume the client correctly guesses the server's curve and omit it?

Thanks!

Answer 1

We would specify whether or not a retry should be initiated by the server in that handshake.

Cheers,
Niklas