jfe

jfe copied to clipboard

IP addresses aren't sent in SNI

3

Browsers shouldn't be sending an IP address in a SNI, and LetsEncrypt, as far as I know, should refuse to issue a certificate for an IP address.

ericlaw1979

TLS handshake sniff may fail if client sends 1 byte before rest of handshake

1

If the first MSG_PEEK returns only one byte, it should probably block until the second byte is read?

ericlaw1979