Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
hzwanip
4 months ago
|
parent
|
context
|
favorite
| on:
RFC 9849. TLS Encrypted Client Hello
How would you (an arbitrary web server) fingerprint a TLS connection if the Client Hello is encrypted?
conradludgate
4 months ago
|
next
[–]
The website owner (or cloudflare in this case) has the keys to decrypt the client hello. That's necessary for routing information.
hzwanip
4 months ago
|
parent
|
next
[–]
You're right, sorry! I got confused myself.
szmarczak
4 months ago
|
prev
[–]
By decrypting it? I don't think you know how TLS, or E2E works in general. ISP doesn't perform the fingerprinting, the server does.
hzwanip
4 months ago
|
parent
[–]
Of course! My bad, thanks for engaging.
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
