Comparing hashes of responses without knowing what is inside wouldn’t work? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		SV_BubbleTime 29 days ago \| parent \| context \| favorite \| on: Dropping Cloudflare for Bunny.net Comparing hashes of responses without knowing what is inside wouldn’t work?

OlivOnTech 29 days ago | [–]

No it would not work. TLS protects against replay attacks by design, the same response (or query) in clear text will not look the same in encrypted traffic

woofcat 29 days ago | [–]

No, as the request headers would be different for things like time.

SV_BubbleTime 29 days ago | [–]

Ya maybe. Blocks that are hashed perhaps?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact