search

FoxIO-LLC / ja4

JA4+ is a suite of network fingerprinting standards
https://foxio.io
Other
989 stars 85 forks source link

More clarifications of ALPN handling #156

Closed lrstewart closed 2 months ago

lrstewart commented 2 months ago

Here's my suggested changes in response to the additional questions in https://github.com/FoxIO-LLC/ja4/issues/148. I'm also not sure "nibble" alone is clear enough that we mean the hex digit, so I tried to rephrase that. There might be too many examples, but I think these cases are easily misunderstood and need to be very clear.

john-althouse commented 2 months ago

Thanks @lrstewart ! Sorry for the delay, I was out last week presenting JA4+ at a conference.