4 ms·
As that page describes, Caddy's detection only works on SSL-served pages, by comparing the TLS Handshake, to the expected TLS Handshake pattern of the advertise
by thisacctforreal 9y ago
As that page describes, Caddy's detection only works on SSL-served pages, by comparing the TLS Handshake, to the expected TLS Handshake pattern of the advertised User-Agent.
- yjftsjthsd-h 9y agoIronically, if you're using Caddy, I struggle to think why you wouldn't already be pure HTTPS.
- mholt 9y agoYes, and it is fair to assume that a page served over HTTP is not trustworthy in any case.
- thisacctforreal 9y agoYup, but "these attacks" in your first post was specifically HTTP modification, which is the only thing Comcast is capable of doing.