3 ms·

How would this fair now against encryption? Being that's it's from 2014.

• nickphx 4y ago
  It looks at tcp header values, not packet data.
  • account-5 4y ago
    Thanks, that makes sense now. It was a genuine question, must have missed it on the page, I was wondering why I was getting downvoted.
    • iou 4y ago
      Yeah, that is a reasonable question if you’re not familiar. People are mean if they’re downvoting :(
• nibbleshifter 4y ago
  If you update the fingerprints, it will still work fine. Application layer or session layer stuff like encryption is irrelevant, the fingerprints are largely based on differences at the transport layer and below. You can also do some nice fingerprinting at the TLS layer based on stuff like what ciphers are offered, the order of them, etc.