13.3 Finished message
Bob’s Finished is the final message in the TLS handshake protocol. This message authenticates the handshake as well as the secret shared keys that Alice and Bob agreed upon.
Both Alice and Bob (when he receives Alice’s Finished message while in state WF ) verify the correctness of this message’s contents and immediately terminate the TLS handshake with decrypt˙error if the verification fails.
After Alice and Bob transmitted their Finished messages and successfully verified the received Finished message, they can send and receive application data over the secure channel established using the TLS handshake.
Alternatively, Alice and Bob may transmit data before receiving the peer’s Finished message in the following situations:
Bob sends 0-RTT data.
Alice sends application data after sending her first flight, that is, after her
ServerHellomessage. However, since the TLS handshake is incomplete, she has no assurance of Bob’s...
