3 ms·
Similar techniques are known in the HTTP world too. There were things like detecting the order of HTTP request headers and matching them to known software, or e
by kccqzy 2y ago
Similar techniques are known in the HTTP world too. There were things like detecting the order of HTTP request headers and matching them to known software, or even just comparing the actual content of the Accept header.
- miki123211 2y agoAnd then there's also TLS fingerprinting. Different browsers use TLS in slightly different ways, send data in a slightly different order, have a different set of supported extensions / algorithms etc. If your user agent says Safari 18, but your TLS fingerprint looks like Curl and not Safari, sophisticated services will immediately detect that something isn't right.