TLS 1.3 support with WebSockets

Is WebSockets supported with macOS (11.4)

Yes.

Regarding:

Safari browser v14.1.1?

Also, yes.

Regarding:

This is the error we are getting when we try to access a WSS URL with TLS 1.3 enabled from Safari: OSSStatus: 9836 (Bad Protocol Version) Please help us with this query.

I am not sure about the TLS 1.3 case specifically, but could you provide an example?

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

Thank you for the response here. I spoke with a colleague on this matter and the consensus was that the network transport that runs the WebSocket implementation in WebKit did not support TLS 1.3. However, one way to sort this out is to try the WebSocket connection with NWConnection instead, i.e., using the defaultProtocolStack for NWProtocolWebSocket.Options. If that works then we know there is an issue with how WebKit is handling TLS 1.3 and a bug report need to be opened there. If that does not work then it is evidence that TLS 1.3 is not supported for our WebSocket transport and a enhancement request need to be opened here to support TLS 1.3.

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

Hi Matt, We are seeing same error with Mail client in iOS 18.0 Beta1/2, third party e-mail IMAP account gives error “Unable to create a secure connection to the server (‘bad protocol version’ -9 836)”. If we switched off use SSL message disappeared.