mirror of
https://github.com/tladesignz/dnstt.git
synced 2026-10-05 21:38:09 +03:00
David Fifield
644489c181
Chrome fingerprints appear to be usable now, as long as they are not the
oldest ones.. (Compare to the commit log message of
98bdffa1706dfc041d1e99b86c47f29d72ad3a0c.) Also add the "random"
fingerprint.
-doh dns.google -dot dns.google -doh 1.1.1.1 -dot 1.1.1.1
none ok ok ok ok
random ok ok ok ok
Firefox_55 ok ok ok ok
Firefox_56 ok ok ok ok
Firefox_63 ok ok ok ok
Firefox_65 ok ok ok ok
Firefox_99 ok ok ok ok
Firefox_102 ok ok ok ok
Firefox_105 ok ok ok ok
Firefox_120 ok ok ok ok
Chrome_58 ERROR ERROR ok ok
Chrome_62 ERROR ERROR ok ok
Chrome_70 ERROR ERROR ok ok
Chrome_72 ok ok ok ok
Chrome_83 ok ok ok ok
Chrome_87 ok ok ok ok
Chrome_96 ok ok ok ok
Chrome_100 ok ok ok ok
Chrome_102 ok ok ok ok
Chrome_120 ok ok ok ok
iOS_11_1 ok ok ok ok
iOS_12_1 ok ok ok ok
iOS_13 ok ok ok ok
iOS_14 ok ok ok ok
This is the script used to collect data for the above table:
TCPDUMP="tcpdump"
FPS="
none random Firefox_55 Firefox_56 Firefox_63 Firefox_65
Firefox_99 Firefox_102 Firefox_105 Firefox_120 Chrome_58
Chrome_62 Chrome_70 Chrome_72 Chrome_83 Chrome_87 Chrome_96 Chrome_100
Chrome_102 Chrome_120 iOS_11_1 iOS_12_1 iOS_13 iOS_14
"
sudo -v; \
for HOST in dns.google 1.1.1.1; do
for UTLS in $FPS; do
ID="doh-utls-$HOST-$UTLS";
echo
echo "$ID"
sudo $TCPDUMP -n -U -w "$ID.pcap" &
sleep 1;
timeout 2 ./dnstt-client -doh https://"$HOST"/dns-query -utls "$UTLS" -pubkey-file "$PUBKEY" "$DOMAIN" 127.0.0.1:7000;
sudo kill $!;
tshark -n -V -Y ssl.handshake.ciphersuites -r "$ID.pcap" | sed -n -e '/^Transport Layer Security/,/^$/p' > "$ID.txt";
ID="dot-utls-$HOST-$UTLS";
echo
echo "$ID"
sudo $TCPDUMP -n -U -w "$ID.pcap" &
sleep 1;
timeout 2 ./dnstt-client -dot "$HOST":853 -utls "$UTLS" -pubkey-file "$PUBKEY" "$DOMAIN" 127.0.0.1:7000;
sudo kill $!;
tshark -n -V -Y ssl.handshake.ciphersuites -r "$ID.pcap" | sed -n -e '/^Transport Layer Security/,/^$/p' > "$ID.txt";
done;
done