-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hey All,
In some recent research we came across another easily-fingerprintable attribute of the Tor TLS handshake, so I would like to propose this addition to Proposal 179:
https://github.com/twilde/torspec/commit/c202230b40c72cbdbe43bbda9cc1a7caad3...
Or, if in my git-newb-ish-ways I represent this correctly:
git://github.com/twilde/torspec.git@c202230b40
Short summary: we should send an SSL Session ID, even if we don't track it or ever use it (which I wouldn't suggest we do) because not sending one makes us stick out like a sore thumb. :)
Apologies if my git-newb-ish-nes makes this more difficult to grab, pointers welcome (I may be a git newb but I'm totally in love with it, mmm, sexy VCS :)).
Thanks, Tim
- -- Tim Wilde, Senior Software Engineer, Team Cymru, Inc. twilde@cymru.com | +1-847-378-3333 | http://www.team-cymru.org/