0

There will be internet censorship based on SNI filtering in my country next year, and I want to make a program that intercepts the TLS handshake packet and strips the SNI field to bypass censorship. (I know that removing SNI field may make some unexpected behaviors, but I suppose that I can remove it if the server uses only one domain) However, there are no browsers that support removing the field, so I have to make one myself. (maybe using curl is not a good idea) So, I want a library that supports

  • C/C++ API
  • capturing and modifying a HTTP packet (More precisely, TLS handshake packet)
  • sending a packet after modification
  • automatic proxy setting like Fiddler

What library would be best?

  • but I suppose that I can remove it if the server uses only one domain True, it's only needed if one server hosts more than one SSL website. Problem is, the vast majority of websites are on shared hosts that have many pages on them. I would expect a substancial part of internet will break, save for the biggest websites. – Alejandro Oct 22 '18 at 11:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.