Measured 26 July 2026 against one relay from two networks, twelve attempts
per profile per network, every hello built from the client's own templates.
Unfiltered, all six profiles are answered in under fifty milliseconds.
Filtered, the four that keep a fixed extension order are answered 12/12,
while chrome_modern and android_chrome are answered 3/12 and get silence
otherwise - same relay, same secret, same minutes, same machine. The
post-quantum key share is not the trait being refused: three of the four
that pass carry it too. Extension permutation is the only structural trait
the two refused ones share and the four survivors lack.
The client defaulted to chrome_modern, so on such a network no proxy ever
completed a handshake while a plain Python probe on the same machine in the
same minute did. That is what "our client breaks working proxies" was.
Auto now resolves to yandex, and a refused fingerprint is steered away from
at both places a setting becomes a hello, so a hand-picked chrome_modern
does not keep a client mute either. The templates stay in the table with
their capture metadata - the JA4 guard still checks one - they are simply
never sent.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
b334f9c137