Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hide a plaintext SNI in snifd/srv.c #3

Open
vesvault opened this issue Oct 8, 2021 · 0 comments
Open

Hide a plaintext SNI in snifd/srv.c #3

vesvault opened this issue Oct 8, 2021 · 0 comments
Labels
enhancement New feature or request hacktoberfest Hacktoberfest

Comments

@vesvault
Copy link
Collaborator

vesvault commented Oct 8, 2021

snifd/srv.c, the listener for connections from the server processes on the end IoT devices,
relays the TLS traffic for the matched socket without any modifications, including the client TLS hello with a plaintext SNI record.
However, the server process on the end IoT device generally doesn't need a legible SNI.
Would like to explore the possibility of hiding or disguising the SNI hostname in snifd/cln.c connection
without breaking the end-to-end TLS stream.

@vesvault vesvault added enhancement New feature or request hacktoberfest Hacktoberfest labels Oct 8, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request hacktoberfest Hacktoberfest
Projects
None yet
Development

No branches or pull requests

0 participants