TLS1.3 - New Session Ticket sent before receiving "Client Finished"

As mentioned in RFC 8446 - RFC 8446 - The Transport Layer Security (TLS) Protocol Version 1.3, in figure 3 “New Session Ticket” is usually sent by servers after it gets the “Client Finished” message.

But for the domain pypi.org hosted on cloudflare the ordering is different as seen below.

Is this not in violation of the RFC? Can someone please clarfiy.

Thanks,
Anupama M

1 Like

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.