Hacker News new | ask | show | jobs
by hzwanip 112 days ago
How would you (an arbitrary web server) fingerprint a TLS connection if the Client Hello is encrypted?
2 comments
conradludgate 112 days ago
The website owner (or cloudflare in this case) has the keys to decrypt the client hello. That's necessary for routing information.
link
hzwanip 112 days ago
You're right, sorry! I got confused myself.
link
szmarczak 112 days ago
By decrypting it? I don't think you know how TLS, or E2E works in general. ISP doesn't perform the fingerprinting, the server does.
link
hzwanip 112 days ago
Of course! My bad, thanks for engaging.
link