TLS Client Hello Mirror https://tlsprivacy.nervuri.net/

Go to file

nervuri 72b3259428 move HTML and gemtext to separate files		2023-03-11 12:48:41 +00:00
.gitignore	init	2022-05-22 00:00:00 +00:00
INSTALL.md	update installation instructions	2023-02-15 16:20:45 +00:00
LICENSE.txt	init	2022-05-22 00:00:00 +00:00
Makefile	init	2022-05-22 00:00:00 +00:00
README.md	update roadmap	2022-05-27 00:00:00 +00:00
client_hello_parser.go	go fmt	2022-05-27 00:00:00 +00:00
drop_privileges.go	output errors to stderr	2023-03-11 12:00:39 +00:00
go.mod	add go.mod and go.sum	2023-01-31 11:27:50 +00:00
go.sum	add go.mod and go.sum	2023-01-31 11:27:50 +00:00
index.gmi	move HTML and gemtext to separate files	2023-03-11 12:48:41 +00:00
index.html	move HTML and gemtext to separate files	2023-03-11 12:48:41 +00:00
server.go	move HTML and gemtext to separate files	2023-03-11 12:48:41 +00:00

README.md

TLS Client Hello Mirror

This test:

reflects the complete Client Hello message, preserving the order in which TLS parameters and extensions are sent;
can be used to check for TLS privacy pitfalls (session resumption, TLS fingerprinting, system time exposure);
supports both HTTP and Gemini on the same port;
is free as in freedom and trivial to self-host.

The API is largely stable - fields may be added, but existing fields will not be modified or removed. IANA-assigned codes for TLS parameters and extensions are documented at:

Note that these lists do not include draft extensions and GREASE values. Missing values will be documented here as the project evolves.

Installation

See INSTALL.md.

Roadmap

HTML & gemtext front-end
documentation
detect client vulnerability to session prolongation attacks
support sessionID-based resumption (Go's crypto/tls library currently does not)
support early data / 0-RTT (Go's crypto/tls library currently does not)

License

AGPL v3.0 or later. If you host a modified version, you must provide users access to its source code under the same license.

Contributing

This project is hosted at tildegit.org. If you don't want to make an account, just shoot me an email with your patch / suggestion / bug report / whatever else.