search

FoxIO-LLC / ja4

JA4+ is a suite of network fingerprinting standards
https://foxio.io
Other
903 stars 78 forks source link

Consider de-GREASEing signature algorithm values #65

Closed TheRealPancakes closed 8 months ago

TheRealPancakes commented 8 months ago

In Section 3.1 of RFC8701 :

Applying Generate Random Extensions And Sustain Extensibility (GREASE) to TLS Extensibility

It states that clients may select one or more GREASE signature algorithm values and advertise them in the "signature_algorithms" or "signature_algorithms_cert" extensions.

The reference implementations of JA4 don't appear to de-GREASE these fields.

TheRealPancakes commented 8 months ago

Duplicate of Issue 60 -- self-closing