Thursday, February 23, 2017

sshttp SNI proxy trickery




The sshttp protocol muxer has been updated to support
SNI muxing. When muxing SSH/HTTPS, the ClientHello message
of the TLS handshake may contain a SNI, which is parsed by
sshttpd  and can be routed to an alternative port (rather than to the regular https port specified with -H).
This is of particular interest with the drops p2p network,
as it is using TLS with the SNI of drops.v2.
This way you can hide sshd and drops behind your https server.


No comments: