TLS fingerprinting vulns about trojan HOT 3 CLOSED

Thank you for your report. Can you please specify your listed vulnerabilities so that I can make improvements? For example, I don't know what you mean by SNI. Trojan indeed adds SNI in Client Hello.
BTW, can you elaborate on the reasons we need Client Hello padding?

from trojan.

There are no immediate issues to fix as I was just asking if you are aware of the list of potential TLS fingerprinting features because I didn't see any claims in the docs about it and a cursory look found at least the cipher list seemed quite unique. Tor had the lesson of getting detected by the GFW via TLS fingerprinting. It shouldn't be repeated.

from trojan.

Merge into #13.

from trojan.