Skip to content
This repository has been archived by the owner on Jul 11, 2023. It is now read-only.

TLS grain could provide JA3(s) hashes (or at least what is needed to calculate them) #176

Open
gdemarcsek opened this issue Jul 11, 2020 · 1 comment

Comments

@gdemarcsek
Copy link

I was wondering why not to provide the following additional context for TLS client hello measurements:

https://docs.rs/rustls/0.15.1/rustls/internal/msgs/handshake/struct.ClientHelloPayload.html#structfield.extensions

https://docs.rs/rustls/0.15.1/rustls/internal/msgs/handshake/struct.ClientHelloPayload.html#method.get_ecpoints_extension

https://docs.rs/rustls/0.15.1/rustls/internal/msgs/handshake/struct.ClientHelloPayload.html#method.get_namedgroups_extension

This would allow the receiver to calculate JA3 (https://github.com/salesforce/ja3) hashes - or ingraind could do the calulcation itself depending on your design goals. (Data for JA3s could similarly be collected from server hello payloads)

@rsdy
Copy link
Collaborator

rsdy commented Jul 13, 2020

This is a great idea, and we'll definitely consider it. Thanks for bringing it up!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants