34 releases 1,069 tags

RSS feed

• dev-254 b334f9c137

  Compare

  Stop sending the fingerprint a filtered network refuses

  Ghost released this 2026-07-26 15:55:21 +03:00 | 1817 commits to dev since this release

  Measured 26 July 2026 against one relay from two networks, twelve attempts
  per profile per network, every hello built from the client's own templates.
  Unfiltered, all six profiles are answered in under fifty milliseconds.
  Filtered, the four that keep a fixed extension order are answered 12/12,
  while chrome_modern and android_chrome are answered 3/12 and get silence
  otherwise - same relay, same secret, same minutes, same machine. The
  post-quantum key share is not the trait being refused: three of the four
  that pass carry it too. Extension permutation is the only structural trait
  the two refused ones share and the four survivors lack.

  The client defaulted to chrome_modern, so on such a network no proxy ever
  completed a handshake while a plain Python probe on the same machine in the
  same minute did. That is what "our client breaks working proxies" was.

  Auto now resolves to yandex, and a refused fingerprint is steered away from
  at both places a setting becomes a hello, so a hand-picked chrome_modern
  does not keep a client mute either. The templates stay in the table with
  their capture metadata - the JA4 guard still checks one - they are simply
  never sent.

  Co-Authored-By: Claude Opus 5 noreply@anthropic.com

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads