Opened 2 years ago

Closed 2 years ago

#15512 closed task (fixed)

Check meek TLS fingerprint on ESR 38

Reported by: dcf Owned by: dcf
Priority: Medium Milestone:
Component: Obfuscation/meek Version:
Severity: Keywords: ff38-esr
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

#15196 Rebase Tor Browser patches to ESR 38

See #13442 for an earlier version of this ticket on ESR 31.

Child Tickets

Change History (4)

comment:1 Changed 2 years ago by dcf

The released 5.0a3 is based on ESR 38.

comment:2 Changed 2 years ago by dcf

There is a mismatch in the ALPN extension. Tor Browser 5.0a3 on the left, Firefox 38.1 on the right.

             Extension: Application Layer Protocol Negotiation
                 Type: Application Layer Protocol Negotiation (0x0010)
-                Length: 11
-                ALPN Extension Length: 9
+                Length: 41
+                ALPN Extension Length: 39
                 ALPN Protocol
+                    ALPN string length: 5
+                    ALPN Next Protocol: h2-16
+                    ALPN string length: 5
+                    ALPN Next Protocol: h2-15
+                    ALPN string length: 5
+                    ALPN Next Protocol: h2-14
+                    ALPN string length: 2
+                    ALPN Next Protocol: h2
+                    ALPN string length: 8
+                    ALPN Next Protocol: spdy/3.1
                     ALPN string length: 8
                     ALPN Next Protocol: http/1.1

comment:3 Changed 2 years ago by dcf

Setting these prefs is sufficient to make the fingerprint match:

user_pref("network.http.spdy.enabled", true);
user_pref("network.http.spdy.enabled.http2", true);
user_pref("network.http.spdy.enabled.http2draft", true);
user_pref("network.http.spdy.enabled.v3-1", true);

I got them by looking at the settings in Iceweasel 38.1.

comment:4 Changed 2 years ago by dcf

Resolution: fixed
Status: newclosed

Made #16662 with a patch to make the TLS fingerprint match again.

Note: See TracTickets for help on using tickets.