TLS Client Hello Mirror https://tlsprivacy.nervuri.net/

Go to file

nervuri 8cf7b02e1b improve drop root code; remove reliance on C		2023-01-31 15:28:48 +00:00
.gitignore	init	2022-05-22 00:00:00 +00:00
INSTALL.md	improve drop root code; remove reliance on C	2023-01-31 15:28:48 +00:00
LICENSE.txt	init	2022-05-22 00:00:00 +00:00
Makefile	init	2022-05-22 00:00:00 +00:00
README.md	update roadmap	2022-05-27 00:00:00 +00:00
client_hello_parser.go	go fmt	2022-05-27 00:00:00 +00:00
go.mod	add go.mod and go.sum	2023-01-31 11:27:50 +00:00
go.sum	add go.mod and go.sum	2023-01-31 11:27:50 +00:00
server.go	improve drop root code; remove reliance on C	2023-01-31 15:28:48 +00:00

README.md

TLS Client Hello Mirror

This test:

reflects the complete Client Hello message, preserving the order in which TLS parameters and extensions are sent;
can be used to check for TLS privacy pitfalls (session resumption, TLS fingerprinting, system time exposure);
supports both HTTP and Gemini on the same port;
is free as in freedom and trivial to self-host.

The API is largely stable - fields may be added, but existing fields will not be modified or removed. IANA-assigned codes for TLS parameters and extensions are documented at:

Note that these lists do not include draft extensions and GREASE values. Missing values will be documented here as the project evolves.

Installation

See INSTALL.md.

Roadmap

HTML & gemtext front-end
documentation
detect client vulnerability to session prolongation attacks
support sessionID-based resumption (Go's crypto/tls library currently does not)
support early data / 0-RTT (Go's crypto/tls library currently does not)

License

AGPL v3.0 or later. If you host a modified version, you must provide users access to its source code under the same license.

Contributing

This project is hosted at tildegit.org. If you don't want to make an account, just shoot me an email with your patch / suggestion / bug report / whatever else.