anchor.diff:                      match adOpt with
                       | None -> raise (IOException(sprintf "TLS-HS: Internal error: %A" err))
                       | Some ad -> raise (IOException(sprintf "TLS-HS: Sent fatal alert: %A %A" ad err))
  -                | TLS.Close ns -> closed <- true; (conn,[||]) // This is a closed connection, should not be used!
  +                | TLS.Close ns -> closed <- true; (conn,empty_bytes) // This is a closed connection, should not be used!
                   | TLS.Fatal ad -> raise (IOException(sprintf "TLS-HS: Received fatal alert: %A" ad))
                   | TLS.Warning (conn,ad) -> raise (IOException(sprintf "TLS-HS: Received warning alert: %A" ad))
                   | TLS.CertQuery (conn,q,advice) -> raise (IOException(sprintf "TLS-HS: Asked to authorize a certificate twice"))
                   | TLS.Handshaken conn -> wrapRead conn
                   | TLS.Read (conn,msg) ->
                       let read = undoMsg_i conn msg in
  -                    if equalBytes read [||] then
  +                    if equalBytes read empty_bytes then
                           // The other party sent some empty fragment. Let's read more.
                           wrapRead conn
                       else
  
positive.code:         | TLS.Handshaken conn -> wrapRead conn
          | TLS.Read (conn,msg) ->
              let read = undoMsg_i conn msg in
              if equalBytes read [||] then
                  // The other party sent some empty fragment. Let's read more.
                  wrapRead conn
              else
  
negative.code:             match adOpt with
              | None -> raise (IOException(sprintf "TLS-HS: Internal error: %A" err))
              | Some ad -> raise (IOException(sprintf "TLS-HS: Sent fatal alert: %A %A" ad err))
          | TLS.Close ns -> closed <- true; (conn,empty_bytes) // This is a closed connection, should not be used!
          | TLS.Fatal ad -> raise (IOException(sprintf "TLS-HS: Received fatal alert: %A" ad))
          | TLS.Warning (conn,ad) -> raise (IOException(sprintf "TLS-HS: Received warning alert: %A" ad))
          | TLS.CertQuery (conn,q,advice) ->
  