mirror of
https://github.com/seriyps/mtproto_proxy.git
synced 2026-09-22 20:54:48 +00:00
36b30e3f5f
Each fake-TLS SNI domain gets a unique 16-byte secret derived from the
SNI, base secret and a private salt, so users cannot extract the base secret
from their proxy link or forge tokens by guessing other domains.
Derivation: SHA256(salt || hex(base_secret) || sni_domain)[0:16]
Salt-first ordering ensures security even when base_secret is known
(e.g. when non-fake-TLS protocols are enabled on the same port).
New config options (default: off):
{per_sni_secrets, off | on}
{per_sni_secret_salt, <<"..ascii..">>}
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
|
||
|---|---|---|
| .. | ||
| bench_codec_decode.erl | ||
| bench_codec_encode.erl | ||
| mtp_prop_gen.erl | ||
| mtp_test_client.erl | ||
| mtp_test_cmd_rpc.erl | ||
| mtp_test_datacenter.erl | ||
| mtp_test_echo_rpc.erl | ||
| mtp_test_metric.erl | ||
| mtp_test_middle_server.erl | ||
| prop_mtp_abridged.erl | ||
| prop_mtp_aes_cbc.erl | ||
| prop_mtp_codec.erl | ||
| prop_mtp_fake_tls.erl | ||
| prop_mtp_full.erl | ||
| prop_mtp_intermediate.erl | ||
| prop_mtp_obfuscated.erl | ||
| prop_mtp_rpc.erl | ||
| prop_mtp_statefull.erl | ||
| single_dc_SUITE.erl | ||
| test-sys.config | ||