TLS Client Hello Mirror https://tlsprivacy.nervuri.net/

Go to file

nervuri b7322519a8 big UI commit; add NJA3 proper * add HTML and Gemtext UI * extend NJA3 * decode hex-encoded Client Hello message sent as query string * decode compress_certificate extension (RFC 8879) * update golang.org/x/crypto from v0.5.0 to v0.13.0 * in /json/v2, expose IANA "recommended" boolean field for cipher_sutes and signature_algorithms * suggest certbot's `--deploy-hook` option in INSTALL.md		2023-09-20 08:31:19 +00:00
.reuse	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
LICENSES	reorganize code, add json/v2 endpoint and API doc	2023-04-30 16:27:55 +00:00
clienthello	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
.gitignore	reorganize code, add json/v2 endpoint and API doc	2023-04-30 16:27:55 +00:00
DOC.md	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
INSTALL.md	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
LICENSE.txt	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
Makefile	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
NJA3.md	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
README.md	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
drop_privileges.go	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
error.html	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
formatting.go	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
go.mod	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
go.sum	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
index.gmi	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
index.html	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
request.go	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
response.go	change license to BSD-3-Clause; ensure REUSE compliance	2023-04-03 10:49:30 +00:00
script.js	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
server.go	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00
style.css	big UI commit; add NJA3 proper	2023-09-20 08:31:19 +00:00

README.md

TLS Client Hello Mirror

This test:

reflects the complete Client Hello message in multiple forms, preserving the order in which TLS parameters and extensions are sent;
can be used to check for TLS privacy pitfalls (session resumption, TLS fingerprinting, system time exposure);
supports both HTTP and Gemini on the same port;
is free as in freedom and trivial to self-host.

A live instance is running at tlsprivacy.nervuri.net.

Installation

See INSTALL.md.

API documentation

This test exposes two JSON endpoints:

See DOC.md for details.

Wishlist

detect client vulnerability to session prolongation attacks
support early data / 0-RTT (Go's crypto/tls library currently does not)
support sessionID-based resumption (Go's crypto/tls library currently does not)
decode more extensions
token binding (RFCs 8471-8473, formerly Channel ID) can be bad for privacy, but Chromium removed support in 2018. Edge might still support it, though. It may be worth testing for it (add to highlights and add warning in the UI).

Contributing

This project is hosted at tildegit.org. If you don't want to make an account, just shoot me an email with your patch / suggestion / bug report / whatever else.