TLS Client Hello Mirror https://tlsprivacy.nervuri.net/

Go to file

nervuri 9d8ff3601f improve HTML output and check it using Tidy		2023-04-03 10:49:30 +00:00
.reuse	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
LICENSES	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
.gitignore	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
INSTALL.md	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
LICENSE.txt	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
Makefile	improve HTML output and check it using Tidy	2023-04-03 10:49:30 +00:00
README.md	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
client_hello_parser.go	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
drop_privileges.go	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
go.mod	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
go.sum	add go.mod and go.sum	2023-01-31 11:27:50 +00:00
index.gmi	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
index.html	improve HTML output and check it using Tidy	2023-04-03 10:49:30 +00:00
request.go	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
response.go	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
server.go	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00

README.md

TLS Client Hello Mirror

This test:

reflects the complete Client Hello message, preserving the order in which TLS parameters and extensions are sent;
can be used to check for TLS privacy pitfalls (session resumption, TLS fingerprinting, system time exposure);
supports both HTTP and Gemini on the same port;
is free as in freedom and trivial to self-host.

The API is largely stable - fields may be added, but existing fields will not be modified or removed. IANA-assigned codes for TLS parameters and extensions are documented at:

Note that these lists do not include draft extensions and GREASE values. Missing values will be documented here as the project evolves.

Installation

See INSTALL.md.

Roadmap

HTML & gemtext front-end
documentation
detect client vulnerability to session prolongation attacks
support sessionID-based resumption (Go's crypto/tls library currently does not)
support early data / 0-RTT (Go's crypto/tls library currently does not)

Contributing

This project is hosted at tildegit.org. If you don't want to make an account, just shoot me an email with your patch / suggestion / bug report / whatever else.