2 ms·
> We consider an HTTPS connection to be intercepted when there is a mismatch between the expected client request signature corresponding to the browser identifi
by rollcat 3y ago
> We consider an HTTPS connection to be intercepted when there is a mismatch between the expected client request signature corresponding to the browser identified by the User Agent, and the actual client request fingerprint of the request.
Sounds like something that would be "trivial" to defeat, by means of "emulating" other TLS implementations more closely?
- homarp 3y agowhich is what https://github.com/lwthiker/curl-impersonate https://github.com/lwthiker/curl-impersonate does: it's a special build of curl that can impersonate Chrome & Firefox
- nwellinghoff 3y agoCan this be used as a proxy to your real browser? Can you paint the whole picture/setup for a noob?
- cbsmith 3y agoPresumably so. You'd just need to compile the curl-impersonate for the appropriate browser you want to impersonate, and then link it in to a proxy that used libcurl for its https traffic.