Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

TLS handshake for a given client

I'm working on an academic project about TLS handshakes and i have captured some TLS traffic generated by multiple clients (google chrome, firefox...) and I want to see if for a given browser the client hello message will always be the same or no (I have removed the GREASE extensions because they are added in a random way to the client hello message and I omitted the SNI). I found that the same browser generate multiple client hello messages. Is it normal to see such behavior or I'm doing something wrong?