[squid-users] Yet another new cipher?
James Lay
jlay at slave-tothe-box.net
Thu Jun 30 12:43:45 UTC 2016
On Wed, 2016-06-29 at 19:33 -0600, James Lay wrote:
> Yugh...starting around 10:00 facebook no longer works via
> peek/splice. pcap contents show:
>
> 1QTV01...CHLO....SNI.....VERS....scontent.xx.fbcdn.netQTV1
>
> after the threeway handshake and an instant reset. Anyone know what
> this is? Cause I haven't a clue....screenshot of success after
> bypassing included. Thank you.
>
> James
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
I guess I should also say that this is from the official Facebook app
on Android...just updated on Tuesday.
James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160630/6a46eaa0/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2016-06-29 19-32-43.png
Type: image/png
Size: 58978 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160630/6a46eaa0/attachment-0001.png>
More information about the squid-users
mailing list