Skip to content

Commit

Permalink
Kyber on firefox
Browse files Browse the repository at this point in the history
  • Loading branch information
Waujito authored Nov 26, 2024
1 parent 438a3c1 commit 3376860
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -254,6 +254,8 @@ If you have troubles with some sites being proxied, you can play with flags valu

If you are on Chromium you may have to disable *kyber* (the feature that makes the TLS *ClientHello* very big). I've got the problem with it on router, so to escape possible errors, so it is better to disable it: in `chrome://flags` search for kyber and switch it to disabled state. Alternatively you may set `--sni-detection=brute` and probably adjust `--sni-domains` flag.

*Kyber* on firefox disables with `security.tls.enable_kyber` in `about:config`.

If your browser is using QUIC it may not work properly. Disable it in Chrome in `chrome://flags` and in Firefox `network.http.http{2,3}.enable(d)` in `about:config` option.

It seems like some TSPUs started to block wrongseq packets, so you should play around with faking strategies. I personally recommend to start with `md5sum` faking strategy.
Expand Down

0 comments on commit 3376860

Please sign in to comment.