4 min
Multi-Signal Request Fingerprints: Combining TLS, HTTP and Network
How to design a composite request fingerprint from TLS, HTTP and network signals: picking fields, hashing them safely, and keeping implementations in sync.
read →$ ls ./blog/fingerprinting
Request fingerprinting
How TLS, HTTP and network signals identify the client behind a request, and why they beat IP addresses and user-agent strings for blocking bots.
4 min
TLS Fingerprinting Explained: JA3, JA4 and the ClientHello
How the TLS ClientHello reveals which software made a request, how JA3 and JA4 turn it into a fingerprint, and what Chrome's extension shuffling changed.
read →5 min
Why IP Blocking Fails Against Modern Bots (and What to Use Instead)
IP bans hit real users behind CGNAT and proxies while scrapers rotate addresses for pennies. Why IP-based bot blocking fails, and what to key on instead.
read →other topics