Welcome! Log In Create A New Profile

Advanced

Strinct ALPN & SNI support

Posted by ivanv 
Strinct ALPN & SNI support
April 14, 2022 05:51AM
Goodmorning,
I would like to know if it is possible to add strict ALPN support to my nginx server.
By strict ALPN & SNI support I mean what is described here (https://alpaca-attack.com/):

Strinct ALPN: We recommend that the server aborts the handshake if the client sends the ALPN extension, but the list of protocols does not include a protocol supported by the server. We also recommend that the server acknowledge the ALPN extension, so the client can verify that the server supports ALPN and selected a valid protocol.

Strict SNI: We recommend that the server aborts the handshake if the client sends an SNI hostname that the server does not recognize. We also recommend that the server acknowledges the SNI hostname to the client so the client can verify that the server supports SNI and recognized the hostname.



Edited 1 time(s). Last edit at 04/14/2022 05:59AM by ivanv.
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 67
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready