[squid-users] Yet another new cipher?

James Lay jlay at slave-tothe-box.net
Thu Jun 30 01:33:56 UTC 2016


Yugh...starting around 10:00 facebook no longer works via peek/splice.
 pcap contents show:

1QTV01...CHLO....SNI.....VERS....scontent.xx.fbcdn.netQTV1

after the threeway handshake and an instant reset.  Anyone know what
this is?  Cause I haven't a clue....screenshot of success after
bypassing included.  Thank you.

James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160629/d91eb7c2/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2016-06-29 19-32-43.png
Type: image/png
Size: 58978 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160629/d91eb7c2/attachment-0001.png>


More information about the squid-users mailing list