Conversation
|
Thanks for putting this together. I ran an independent review with Parroteer, an experimental tool I built for capturing real browser/Android TLS fingerprints, comparing them against existing uTLS parrots/baselines, and replay-verifying generated specs. Parroteer can also run in GitHub Actions: it captures up-to-date fingerprints, compares them with the existing fingerprints, and can automatically report detected drift. It is still early, but I hope it can be useful for a future fingerprint auto-update/reporting pipeline. Feedback, usage, and discussion are very welcome.
Android verification run: https://github.com/SaamoCha/parroteer/actions/runs/27101201876 So my read is: Firefox and Android updates are strongly supported by the captures. For Chrome, the new Trust Anchor / ML-DSA profiles are useful, but the Auto choice may need a bit more care because the observed default behavior can vary by feature/field-trial state. |
|
Ok, I think I should keep chrome auto on older version, because these additions are experimental |
A bunch of updated fingerprints: Chrome #397, Firefox #391, Android #392, Edge (but in more proper and polished form then these PRs; 391 is wrong a little bit, for example), everything tested in wireshark