Repository navigation

BlastHTTP 1.0 - Connection Profile - #128

Open

liquidsec wants to merge 29 commits into

devfrom

1.0-connection-profiles

Open

BlastHTTP 1.0 - Connection Profile#128
liquidsec wants to merge 29 commits into
devfrom
1.0-connection-profiles

Commits on Sep 28, 2026
- Offer legacy ciphers by default
  liquidsec
  committed
  252e68a
- Make SSLv3 actually work
  liquidsec
  committed
  019c808
Commits on Sep 29, 2026
- Add offline ClientHello capture and JA4
  liquidsec
  committed
  ce2594b
- Add outcome classifier and live benchmark
  liquidsec
  committed
  0446221
- Score the benchmark per tier, not as one number
  liquidsec
  committed
  e3af326
- Add browser profiles and a Chrome TLS profile
  liquidsec
  committed
  e1b4905
- Patch OpenSSL for renegotiation_info, and make the profile connect
  liquidsec
  committed
  f8d82c8
- Shape the HTTP/2 settings to the profile
  liquidsec
  committed
  03f0b05
- Add BLASTHTTP_BISECT for isolating which profile layer a detector sees
  liquidsec
  committed
  21e1caa
- Recover why a TLS handshake failed
  liquidsec
  committed
  5de87fa
- Promote the antibot classifier into the library
  liquidsec
  committed
  8bbccc5
- Generalise to three connection profiles
  liquidsec
  committed
  8bbf866
- Add the profile ladder
  liquidsec
  committed
  6ceb57f
- Report what was tried, and ship 1.0
  liquidsec
  committed
  bf1bad9
- Test the 1.0 Python surface, and make an unknown profile actually error
  liquidsec
  committed
  4ecc678
- Share ladder discovery across a concurrent burst
  liquidsec
  committed
  614a3c3
- Back out the burst fix: it trades a worse property than it buys
  liquidsec
  committed
  d1d0180
- Give the other three request paths the same connection handling
  liquidsec
  committed
  021a6a4
Commits on Sep 30, 2026
- Share host discovery across a burst by stepping aside, not waiting
  liquidsec
  committed
  71e9b18
- Lift the stand-aside ceiling for send_batch, where it protects nothing
  liquidsec
  committed
  ed2def6
Commits on Oct 5, 2026
- Merge remote-tracking branch 'origin/dev' into 1.0-connection-profiles
  liquidsec
  committed
  ee2ba9d
- Stop the antibot scan panicking on a body cut mid-character
  liquidsec
  committed
  3e1629e
Commits on Oct 24, 2026
- Remember hosts that refuse every rung of the ladder
  liquidsec
  committed
  2ee1bb4
Commits on Oct 26, 2026

Navigation Menu

Repository navigation

BlastHTTP 1.0 - Connection Profile - #128

BlastHTTP 1.0 - Connection Profile#128
liquidsec wants to merge 29 commits into
devfrom
1.0-connection-profiles

Commits on Sep 28, 2026

Offer legacy ciphers by default

Make SSLv3 actually work

Commits on Sep 29, 2026

Add offline ClientHello capture and JA4

Add outcome classifier and live benchmark

Score the benchmark per tier, not as one number

Add browser profiles and a Chrome TLS profile

Patch OpenSSL for renegotiation_info, and make the profile connect

Shape the HTTP/2 settings to the profile

Add BLASTHTTP_BISECT for isolating which profile layer a detector sees

Recover why a TLS handshake failed

Promote the antibot classifier into the library

Generalise to three connection profiles

Add the profile ladder

Report what was tried, and ship 1.0

Test the 1.0 Python surface, and make an unknown profile actually error

Share ladder discovery across a concurrent burst

Back out the burst fix: it trades a worse property than it buys

Give the other three request paths the same connection handling

Commits on Sep 30, 2026

Share host discovery across a burst by stepping aside, not waiting

Lift the stand-aside ceiling for send_batch, where it protects nothing

Commits on Oct 5, 2026

Merge remote-tracking branch 'origin/dev' into 1.0-connection-profiles

Stop the antibot scan panicking on a body cut mid-character

Commits on Oct 24, 2026

Remember hosts that refuse every rung of the ladder

Commits on Oct 26, 2026

Don't count Imperva's loader script as a challenge

Move the anti-bot rules out of code into antibot_rules.json

Format test_profiles_and_report.py

Merge pull request #145 from blacklanternsecurity/antibot-rules-json

Give pre-TLS connect failures their cause, and classify connect timeouts as timeouts

Carry TransportError on batch results, and raise it from the mock