Maintains your HTTP/TLS fingerprint so intercepted traffic behaves identically to the original.
大多数人认为流量拦截和监控会留下明显的痕迹，容易被检测到，但作者声称Kampala可以完美保持原始HTTP/TLS指纹，这挑战了网络安全中关于流量检测的基本假设，暗示可以完全不被察觉地监控网络流量。
77 Matching Annotations
- Apr 2026
-
www.zatanna.ai www.zatanna.ai
Tags
Annotators
URL
-
- Apr 2024
-
identity.foundation identity.foundation
-
centralized servers and certificate authorities perpetuate a power and UX imbalance between servers and clients that doesn’t fit with peer-oriented DIDComm Messaging
-
- Sep 2023
-
blog.cloudflare.com blog.cloudflare.com
-
datatracker.ietf.org datatracker.ietf.org
- Jul 2023
-
Tags
Annotators
URL
-
-
datatracker.ietf.org datatracker.ietf.org
-
curves.xargs.org curves.xargs.org
- May 2023
-
developers.cloudflare.com developers.cloudflare.com
-
blog.cloudflare.com blog.cloudflare.com
-
🥳
```js import { connect } from 'cloudflare:sockets';
export default { async fetch(req: Request) { const gopherAddr = "gopher.floodgap.com:70"; const url = new URL(req.url);
try { const socket = connect(gopherAddr); const writer = socket.writable.getWriter() const encoder = new TextEncoder(); const encoded = encoder.encode(url.pathname + "\r\n"); await writer.write(encoded); return new Response(socket.readable, { headers: { "Content-Type": "text/plain" } }); } catch (error) { return new Response("Socket connection failed: " + error, { status: 500 }); }} };
ts connect(address: SocketAddress | string, options?: SocketOptions): Socketdeclare interface Socket { get readable(): ReadableStream; get writable(): WritableStream; get closed(): Promise<void>; close(): Promise<void>; startTls(): Socket; }
declare interface SocketOptions { secureTransport?: string; allowHalfOpen: boolean; }
declare interface SocketAddress { hostname: string; port: number; } ```
-
-
jvns.ca jvns.ca
Tags
Annotators
URL
-
-
subtls.pages.dev subtls.pages.dev
-
-
tls13.xargs.org tls13.xargs.org
-
-
github.com github.com
Tags
Annotators
URL
-
-
www.davidwong.fr www.davidwong.fr
-
developers.cloudflare.com developers.cloudflare.com
- Apr 2023
-
en.wikipedia.org en.wikipedia.org
-
It is the conceptual equivalent to HTTP/1.1 name-based virtual hosting, but for HTTPS.
Tags
Annotators
URL
-
-
stackoverflow.com stackoverflow.com
-
The rest of the URL (/path/?some=parameters&go=here) has no business being inside ClientHello since the request URL is a HTTP thing (OSI Layer 7), therefore it will never show up in a TLS handshake (Layer 4 or 5). That will come later on in a GET /path/?some=parameters&go=here HTTP/1.1 HTTP request, AFTER the secure TLS channel is established.
-
- Mar 2023
-
www.bortzmeyer.org www.bortzmeyer.org
Tags
Annotators
URL
-
-
datatracker.ietf.org datatracker.ietf.org
Tags
Annotators
URL
-
- Jan 2023
-
blog.cloudflare.com blog.cloudflare.com
-
blog.cloudflare.com blog.cloudflare.com
-
datatracker.ietf.org datatracker.ietf.org
-
blog.cloudflare.com blog.cloudflare.com
Tags
Annotators
URL
-
-
github.com github.com
Tags
Annotators
URL
-
-
blog.cloudflare.com blog.cloudflare.com
- Dec 2022
-
blogs.univ-poitiers.fr blogs.univ-poitiers.fr
Tags
Annotators
URL
-
-
datatracker.ietf.org datatracker.ietf.org
-
ganganichamika.medium.com ganganichamika.medium.com
-
ganganichamika.medium.com ganganichamika.medium.com
-
www.form3.tech www.form3.tech
-
developers.cloudflare.com developers.cloudflare.com
Tags
Annotators
URL
-
-
developers.cloudflare.com developers.cloudflare.com
-
www.cloudflare.com www.cloudflare.com
-
blog.cloudflare.com blog.cloudflare.com
Tags
Annotators
URL
-
-
blog.cloudflare.com blog.cloudflare.com
- Mar 2022
- Feb 2022
-
addons.mozilla.org addons.mozilla.org
-
www.slideshare.net www.slideshare.net
-
www.youtube.com www.youtube.com
-
-
datatracker.ietf.org datatracker.ietf.org
Tags
Annotators
URL
-
- Dec 2021
-
httptoolkit.tech httptoolkit.tech
Tags
Annotators
URL
-
- Oct 2020
-
github.com github.com
Tags
Annotators
URL
-
-
github.com github.com
-
github.com github.com
-
I want to run docker daemon with TLS enabled but client certificate authentication disabled so that clients can verify authenticity of docker daemon but docker daemon doesn't need to verify clients.
-
- Mar 2020
-
-
HKDF-Expand-Label(Secret, Label, Context, Length) = HKDF-Expand(Secret, HkdfLabel, Length)
Tags
Annotators
URL
-
- Dec 2019
-
github.com github.com
-
docs.bigchaindb.com docs.bigchaindb.com
-
extendedKeyUsage
-
-
docs.mongodb.com docs.mongodb.com
-
stackoverflow.com stackoverflow.com
-
extendedKeyUsage = clientAuth
-
- Apr 2019
-
werner-dijkerman.nl werner-dijkerman.nl
- Nov 2018
-
tls13.ulfheim.net tls13.ulfheim.net
-
- Oct 2018
-
istlsfastyet.com istlsfastyet.com
-
-
blog.cloudflare.com blog.cloudflare.com
-
blog.mozilla.org blog.mozilla.org
-
blog.mozilla.org blog.mozilla.org
-
www.gracefulsecurity.com www.gracefulsecurity.com
Tags
Annotators
URL
-
-
gist.github.com gist.github.com
-
-
tls.ulfheim.net tls.ulfheim.net
-
-
medium.facilelogin.com medium.facilelogin.com
-
tools.ietf.org tools.ietf.org
-
This document specifies version 1.0 of the Token Binding protocol. The Token Binding protocol allows client/server applications to create long-lived, uniquely identifiable TLS bindings spanning multiple TLS sessions and connections. Applications are then enabled to cryptographically bind security tokens to the TLS layer, preventing token export and replay attacks. To protect privacy, the Token Binding identifiers are only conveyed over TLS and can be reset by the user at any time.
Tags
Annotators
URL
-
-
self-issued.info self-issued.info
Tags
Annotators
URL
-
- Sep 2018
-
-
This document specifies version 1.3 of the Transport Layer Security (TLS) protocol. TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery. This document updates RFCs 5705 and 6066, and obsoletes RFCs 5077, 5246, and 6961. This document also specifies new requirements for TLS 1.2 implementations.
-