News for hackers. Stuff that matters.

A comment on Internet traffic for Google, Facebook, Apple was briefly rerouted to Russia. Parent comment

Re:Internet traffic for Google, Facebook, Apple was briefly ... by icebraining on Wednesday December 13, 2017 @03:00AM (#15912766)
I don't think IE supports pinning, though, so if they could reliably detect the browser at the TLS handshake stage (don't know if it's possible) they could in theory serve their own cert to those users.
[ Parent | on HN ]
Re:Internet traffic for Google, Facebook, Apple was briefly ... by cesarb on Wednesday December 13, 2017 @06:13AM (#15913511)
> so if they could reliably detect the browser at the TLS handshake stage (don't know if it's possible)

It's possible and easy, the list of ciphers in the ClientHello is different. Take a look at https://www.ssllabs.com/ssltest/clients.html to see what several popular browsers look like.

[ Parent | on HN ]