alt Hacker NewsThat would work with TLS 1.2, but not TLS 1.3. TLS 1.3 sends the certificate after the session key is derived and symmetric encryption is established.
That would work with TLS 1.2, but not TLS 1.3. TLS 1.3 sends the certificate after the session key is derived and symmetric encryption is established.
That doesn't stop you from asking for the certificate on a separate connection with your own session key, and terminating the original connection if you don't like the certificate.