Peakhour.IO - Security Research

What an Open Network Fingerprint Database Should Publish

AC — Sun, 06 Sep 2026 09:00:00 +1000

A useful open fingerprint database needs provenance, competing labels, raw evidence, format versions and licences—not another unexplained hash list.

Does TLS Fingerprint Canonicalisation Hide Attacker Variation? How to Test It

AC — Sun, 16 Aug 2026 09:00:00 +1000

Sorting makes TLS fingerprints more stable, but it also removes ordering evidence. Here is how to test whether the discarded variation matters.

Before JA3: How TLS Handshakes Became Fingerprints

AC — Sun, 19 Jul 2026 09:00:00 +1000

JA3 made TLS fingerprints easy to log and share, but the technical ideas behind it had already been tested in SSL Labs experiments, a p0f patch and FingerprinTLS.

One ClientHello, Three Fingerprints: JA3, JA4 and Mercury

AC — Sun, 12 Jul 2026 09:00:00 +1000

A reproducible lab runs JA3, JA4 and Cisco Mercury against the same TLS ClientHello and compares what each fingerprint preserves.