Skip to content

fix: add missing session_ticket and psk_key_exchange_modes to HelloFirefox_148#391

Open
SaamoCha wants to merge 1 commit intorefraction-networking:masterfrom
SaamoCha:fix/firefox-148-session-extensions
Open

fix: add missing session_ticket and psk_key_exchange_modes to HelloFirefox_148#391
SaamoCha wants to merge 1 commit intorefraction-networking:masterfrom
SaamoCha:fix/firefox-148-session-extensions

Conversation

@SaamoCha
Copy link
Copy Markdown

Fixes #390

Summary

Add SessionTicketExtension (ext 35) and PSKKeyExchangeModesExtension (ext 45) to the HelloFirefox_148 spec, matching their placement in real Firefox and all previous Firefox parrots.

Changes

  • Insert &SessionTicketExtension{} after SupportedPointsExtension
  • Insert &PSKKeyExchangeModesExtension{[]uint8{PskModeDHE}} after SignatureAlgorithmsExtension

Verification

Captured ja3n fingerprint before and after fix via browserleaks.com reflector:

ja3n extensions
Real Firefox 149 0-5-10-11-13-16-18-23-27-28-34-35-43-45-51-65037-65281
utls (before) 0-5-10-11-13-16-18-23-27-28-34-43-51-65037-65281
utls (after) 0-5-10-11-13-16-18-23-27-28-34-35-43-45-51-65037-65281

… to HelloFirefox_148

Firefox 148 parrot was missing SessionTicketExtension (ext 35) and
PSKKeyExchangeModesExtension (ext 45), making it distinguishable from
real Firefox via passive TLS fingerprinting.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

HelloFirefox_148 missing session_ticket (35) and psk_key_exchange_modes (45) extensions

1 participant