Transport attacks & defences

A handshake can be attacked while it happens: an attacker can downgrade the negotiation to a weak version, or sit in the middle with its own certificate (MITM). This module reads annotated handshake transcripts and names the attack — detection first, then the defences that stop each one.