This is a good write-up. Is your blog running JA4 right now?
ArcHound•1h ago
Hello again! Yes it is. If you have an exotic client, I'm here for it :D
Bender•51m ago
Nice. I was more curious of the clients using HTTP/2.0 HTTP Protocol, what percentage of them is JA4 detecting as bots that spoof all the other headers a browser sends? That is the missing piece in my blog write-up as I don't do SSL fingerprinting. I am trying to see what percentage are getting through my very crude methods.
ArcHound•35m ago
I'll get back to you on this, I'll need to parse some logs. I should have at least ALPNs
Bender•1h ago
ArcHound•1h ago
Bender•51m ago
ArcHound•35m ago