TLS handshake for a given client

asked 2020-03-10 16:57:38 +0000

alajeb gravatar image

I'm working on an academic project about TLS handshakes and i have captured some TLS traffic generated by multiple clients (google chrome, firefox...) and I want to see if for a given browser the client hello message will always be the same or no (I have removed the GREASE extensions because they are added in a random way to the client hello message and I omitted the SNI). I found that the same browser generate multiple client hello messages. Is it normal to see such behavior or I'm doing something wrong?

edit retag flag offensive close merge delete