All the fingerprinting tools I've seen so far do not include JA3 signatures, whi... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

CapacitorSet on Jan 25, 2020 | parent | context | favorite | on: Am I Unique?

All the fingerprinting tools I've seen so far do not include JA3 signatures, which in my opinion make for an interesting bit of information - they introduce few bits of entropy since they depend on the TLS implementation, but for the same reason they can't be easily spoofed.

Plugging in an article and demo I wrote some time ago: https://jwlss.pw/ja3/

GordonS on Jan 26, 2020 [–]

I was going to mention the lack of TCP and TLS fingerprinting too - I wonder if those are actually used by rogue advertisers?

Also, I guess TLS fingerprints would change over time, with browser upgrades, although I'd expect changes to be relatively infrequent.

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact