News for hackers. Stuff that matters.

A comment on BlueCoat and other proxies hang up during TLS 1.3. Parent comment

Re:BlueCoat and other proxies hang up during TLS 1.3 by discreditable on Monday February 27, 2017 @09:33PM (#13750649)
Basic filtering can be done via passively inspecting SNI headers and terminating connections to verboten hosts. However, that's not enough for some orgs, and some software works around it: https://www.bamsoftware.com/papers/fronting/
[ Parent | on HN ]
Re:BlueCoat and other proxies hang up during TLS 1.3 by ec109685 on Monday February 27, 2017 @11:00PM (#13751041)
Even simple tls handshake filtering is broken with BlueCoat's implementation.
[ Parent | on HN ]