salesforce / ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.
BSD 3-Clause "New" or "Revised" License
2.61k stars 289 forks source link

about Ignored ext application_settings and ja3 will change by session_ticket #73

Open Xxx-Bin opened 2 years ago

Xxx-Bin commented 2 years ago
  1. Type: application_settings (17513) will be ignored? Why? I didn't see the place mentioned

  2. ja3 will change by session_ticket In chrome ,The ja3 of the first request and subsequent requests are different. The reason is that there is no session ticket for the first time. Most of the time, ja3 seen in a carries a session ticket. However, curl does not carry session tickets

Xxx-Bin commented 2 years ago

When there are session tickets, there will be an extension called padding (21)