Protocol uplift

Give a TLS 1.2 client the benefits of TLS 1.3 — without changing the client.

client speaks TLS 1.2 → TLS Lane → server speaks TLS 1.3

When you need it: A legacy app pinned to TLS 1.2 reaching a modern 1.3 origin — or any 1.2 client you want to give forward secrecy, AEAD ciphers, and PQC without code changes.
How it works: TLS Lane runs a 1.2 handshake with the client and a 1.3 handshake with the server, translating the certificate and handshake shapes between them, with RFC 7627 extended-master-secret handling to block the triple-handshake attack.
Good to know: Client TLS 1.2, server TLS 1.3.
TLS version: TLS 1.2 in → 1.3 out

Enable sudo tlslane splice