diff --git a/crates/net/src/tls/handshake.rs b/crates/net/src/tls/handshake.rs
index b35d72b..0772057 100644
--- a/crates/net/src/tls/handshake.rs
+++ b/crates/net/src/tls/handshake.rs
@@ -786,7 +786,9 @@ pub fn connect<S: Read + Write>(stream: S, server_name: &str) -> Result<TlsStrea
     transcript.update(&client_finished_msg);
 
     // Step 10: Derive application keys
-    key_schedule.derive_app_secrets(&transcript.current_hash());
+    // RFC 8446 §7.1: application traffic secrets use the transcript hash through
+    // server Finished (client_finished_hash), NOT including client Finished.
+    key_schedule.derive_app_secrets(&client_finished_hash);
 
     let client_app_keys = key_schedule.client_app_keys();
     let client_app_iv: [u8; 12] = client_app_keys.iv.try_into().expect("IV must be 12 bytes");