Nefurtity

Need to drop SNI in backend for specified domains

6

The firewall will look for SNI field to block some websites, because SNI is plain texts in Client Hello, the server name can be detected easily, and the SSL connection...

Handshake failed when ChaCha20 comes first in the cipher suite list but without ChaCha20 support

1

Precondition: A server deployed fizz compilation with no ChaCha20 Situation: A client send a Client Hello with Cipher Suits in the following order 1. TLS_CHACHA20_POLY1305_SHA256 (0x1303) 2. TLS_AES_128_GCM_SHA256 (0x1301) 3....