Passive SSL Client Fingerprinting

Passive SSL client fingerprinting allows us to learn about SSL clients by observing the non-encrypted portions of SSL traffic.

• HTTP Client Fingerprinting Using SSL Handshake Analysis (mod_sslhaf)
• SSL fingerprinting for p0f
• Adoption of TLS Extensions
• TLS parsing in Suricata