Andrew Bowen Smart

US Patent:

20220368724, Nov 17, 2022

Filed:

Jul 28, 2022

Appl. No.:

17/815727

Inventors:

- San Francisco CA, US
Andrew Smart - Rockville MD, US
Randy Nunnally, JR. - Ijamsville MD, US
Michael Brady - Indianapolis IN, US
Caleb Yu - Reston VA, US

International Classification:

H04L 9/40
H04L 41/22
H04L 9/06

Abstract:

Methods, systems, and devices supporting active fingerprinting for transport layer security (TLS) servers are described. In some systems, a client device may transmit a same set of client hello messages to each TLS server. The client device may receive a set of server hello messages in response to the standard set of client hello messages based on the contents of each client hello message. For example, a server hello message may indicate a selected cipher suite, TLS protocol version, and set of extensions in response to the specific information included in a client hello message. The client device may generate a hash value (e.g., a fuzzy hash) based on the set of server hello messages received from a TLS server. By comparing the hash values generated for different TLS servers, the client device may determine whether the TLS configurations for the different TLS servers are the same or different.