net4people / bbs

Forum for discussing Internet censorship circumvention
3.2k stars 75 forks source link

WHAT IS " TLS in TLS " #266

Open APT-ZERO opened 11 months ago

APT-ZERO commented 11 months ago

Hello A lot of people are worry about about TLS in TLS, I searched but i found no much information about it Is it all about TLS handshake packets size? What type of configs are affected and which ones are safe Can some one create a detailed article about this? or give the URL if there is any Thank you

computerscot commented 11 months ago

https://github.com/XTLS/Xray-core/discussions/1295

chika0801 commented 11 months ago

https://github.com/3andne/restls

APT-ZERO commented 11 months ago

For people who want to know which configs are safe from TLS in TLS : https://github.com/chika0801/Xray-examples#%E9%85%8D%E7%BD%AE%E4%BB%8B%E7%BB%8D [ VLESS-XTLS-Vision & VLESS-XTLS-uTLS-REALITY ]

I tested other configs using https://github.com/XTLS/Trojan-killer and it didn't detected them, but maybe the tool is no complete and maybe the cores did something to make them undetectable

RPRX commented 11 months ago

I tested other configs using https://github.com/XTLS/Trojan-killer and it didn't detected them, but maybe the tool is no complete and maybe the cores did something to make them undetectable

  1. Trojan-killer 并非通用的 TLS in TLS 握手检测器(据内鬼称 GFW 的可以检测 40% 的 padding,它的更通用)
  2. Vision 的强 padding 策略远超 40%,所以 GFW 的也不好使,这是 Vision 很少被封的重要原因之一
  3. https://github.com/XTLS/Xray-core/discussions/2351#discussioncomment-6500519

  1. Trojan-killer is not a universal TLS in TLS handshake detector (according to insiders, the GFW can detect 40% padding, so it's more universal).
  2. Vision's strong padding policy is far more than 40%, so GFW's doesn't work well either, which is one of the main reasons why Vision is rarely blocked.
  3. https://github.com/XTLS/Xray-core/discussions/2351#discussioncomment-6500519