shadowsocks / shadowsocks/shadowsocks-org

[Peer Review Request]Restls: A Perfect Impersonation of TLS Handshake

Open
#223 5 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
HTML
Stars
1k
Forks
694
PR merge metrics
No merged PRs in 30d

Description

Hi there,
I hope you are having a good day.
We're currently working on a brand new protocol named Restls which can be used as an extension to Shadowsocks. It shares a similar goal with ShadowTLS to circumvent GFW whitelisting but fixes ShadowTLS' fundamental flaw of not being able to provide server authentication. Such flaw might be utilized by GFW and blocks ShadowTLS precisely.
If that sounds good, you might want to take a look at the draft:
Restls: A Perfect Impersonation of TLS Handshake
You can find a proof-of-concept implementation in the same repo.
----------------------
你们好,
希望你们一切顺利。
我们正在设计一个新的协议,名为Restls,它可以作为Shadowsocks的插件使用。它的目标与ShadowTLS类似——绕过GFW的白名单机制,但它试图解决ShadowTLS在协议设计中未能实现的服务端认证,从而避免被准确封杀。
如果你觉得这听起来还行,你或许想看一看这个协议的设计稿:
Restls: 对TLS握手的完美伪装
这个仓库同样包含了一个实现以及其使用方式。

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading the linked Restls protocol draft, then inspect the proof-of-concept implementation in the Restls repository. Determine whether the proposed protocol addresses server authentication and its stated TLS-handshake impersonation goal; completion would be a review with actionable feedback, not a defined repository change.

Written by the indexing model from the issue text.

Assessment

Domain
networking, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.