logoalt Hacker News

hzwaniptoday at 10:59 AM2 repliesview on HN

How would you (an arbitrary web server) fingerprint a TLS connection if the Client Hello is encrypted?


Replies

conradludgatetoday at 11:07 AM

The website owner (or cloudflare in this case) has the keys to decrypt the client hello. That's necessary for routing information.

show 1 reply
szmarczaktoday at 11:10 AM

By decrypting it? I don't think you know how TLS, or E2E works in general. ISP doesn't perform the fingerprinting, the server does.

show 1 reply