5 ms·
Proxying TLS is becoming unusable, thanks again to cloudflare. You keep getting kicked out because they detect the Client Hello[1] does not match whatever they
by rnhmjoj 4y ago
Proxying TLS is becoming unusable, thanks again to cloudflare.
You keep getting kicked out because they detect the Client Hello[1] does not match whatever they think it should be, based on the User Agent string.
I'm not even sure what this is supposed to protect the website from.
[1]: https://github.com/mitmproxy/mitmproxy/issues/4575 https://github.com/mitmproxy/mitmproxy/issues/4575
- classichasclass 4y ago(author) Interesting. That may have been what I ran into. carl itself was unaffected, just proxying through it.
- simcop2387 4y agoIt's probably part of about detection system which cf is usually trying to prevent for their customers. It'd be a relatively easy to detect metric to add to a score for that kind of thing. A bot using a browser use agent string but the wrong tls settings is probably very common.
- emj 4y agoCloudflare does not care about MITM enterprise proxy nor mass surveillance, so there should be wiggle room to get it to work.