Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added hsts cookie support #99

Merged
merged 1 commit into from Oct 26, 2015
Merged

Added hsts cookie support #99

merged 1 commit into from Oct 26, 2015

Conversation

SleepProgger
Copy link
Contributor

Hi, i just finished the hsts-cookie port to evercookie.
It is a bit awkward as the get function is called before the set function finishes.
But it should all be working (in fact it does on my system).

Again about the limitations of this technique:

  • You need a bunch of domains with valid (not self signed) ssl certificates. Or one wildcard certificate.
  • You can store exactly ONE bit per domain/subdomain. I.e: If you have 8 domains you can save values up to 255.

@samyk
Copy link
Owner

samyk commented Oct 25, 2015

Pretty cool -- I understand there's an implementation available with only a single, non-wildcard certificate -- I'm at Toorcon right now and Yan is speaking about it in a few hours. Will see if I can add more info on that...

@SleepProgger
Copy link
Contributor Author

Sounds interesting. I'd love more info on that.
Otherwise i'd have to wait till the Toorcon videos are being uploaded
Found the slides from the talk. Using the timing as response is definitely interesting (esp. as "history hack"), but i don't see how it helps with the certificate issue, or do you know more as i do ? ;)

Also am currently trying another variant of collecting that information based on redirects ( described here ). This might be the better solution for evercookie.

samyk added a commit that referenced this pull request Oct 26, 2015
@samyk samyk merged commit dc3a19c into samyk:master Oct 26, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants