bbs icon indicating copy to clipboard operation
bbs copied to clipboard

WHAT IS " TLS in TLS "

Open APT-ZERO opened this issue 2 years ago • 4 comments

Hello A lot of people are worry about about TLS in TLS, I searched but i found no much information about it Is it all about TLS handshake packets size? What type of configs are affected and which ones are safe Can some one create a detailed article about this? or give the URL if there is any Thank you

APT-ZERO avatar Jul 20 '23 08:07 APT-ZERO

https://github.com/XTLS/Xray-core/discussions/1295

computerscot avatar Jul 20 '23 11:07 computerscot

https://github.com/3andne/restls

chika0801 avatar Jul 20 '23 15:07 chika0801

For people who want to know which configs are safe from TLS in TLS : https://github.com/chika0801/Xray-examples#%E9%85%8D%E7%BD%AE%E4%BB%8B%E7%BB%8D [ VLESS-XTLS-Vision & VLESS-XTLS-uTLS-REALITY ]

I tested other configs using https://github.com/XTLS/Trojan-killer and it didn't detected them, but maybe the tool is no complete and maybe the cores did something to make them undetectable

APT-ZERO avatar Jul 31 '23 08:07 APT-ZERO

I tested other configs using https://github.com/XTLS/Trojan-killer and it didn't detected them, but maybe the tool is no complete and maybe the cores did something to make them undetectable

  1. Trojan-killer 并非通用的 TLS in TLS 握手检测器(据内鬼称 GFW 的可以检测 40% 的 padding,它的更通用)
  2. Vision 的强 padding 策略远超 40%,所以 GFW 的也不好使,这是 Vision 很少被封的重要原因之一
  3. https://github.com/XTLS/Xray-core/discussions/2351#discussioncomment-6500519

  1. Trojan-killer is not a universal TLS in TLS handshake detector (according to insiders, the GFW can detect 40% padding, so it's more universal).
  2. Vision's strong padding policy is far more than 40%, so GFW's doesn't work well either, which is one of the main reasons why Vision is rarely blocked.
  3. https://github.com/XTLS/Xray-core/discussions/2351#discussioncomment-6500519

RPRX avatar Jul 31 '23 18:07 RPRX