[Peer Review Request]Restls: A Perfect Impersonation of TLS Handshake about shadowsocks-org HOT 5 OPEN

This extension (as well as ShadowTLS) would potentially change the 0-rtt nature of Shadowsocks. As of now Restls is only able to parrot TLS handshake. To achieve an overall perfect impersonation, we might need deeper integration with Shadowsocks so that Restls gets more context when an anomaly is detected on the Shadowsocks side. That would allow us to send TLS Alerts accordingly. So far Shadowsocks only resets the connection when an error happens.

from shadowsocks-org.

It would be lovely to implement SIP003 client mode in your restls as well, so that shadowsocks users can use it as a plugin directly.

Some reference SIP003 Rust code here: https://github.com/shadowsocks/qtun/blob/master/src/args/mod.rs

from shadowsocks-org.

This sounds like a good idea but I'm not sure. TLS is very complicated so I expect any TLS-based obfuscation would be very prone to loopholes and errors. @gfw-report Any thoughts, or ideas as for where to find people could review this design?

from shadowsocks-org.

Oh I suppose you can post it to https://github.com/net4people/bbs/issues to see what people there think about this.

from shadowsocks-org.

@Mygod Thanks for the nice suggestion.

from shadowsocks-org.